Privacy Policy

This policy explains how personal data is handled on https://sovarenne.com/, operated under the brand Sovarenne Holding (the Site). It was last updated on October 18, 2026 and its version is 1.2.0.

It covers people who browse the public pages and people who send the contact form. It does not describe a customer account system, because the Site does not offer one. The contact form states its purpose and asks for consent before a message is stored.

The public Site is informational. It accepts one contact form and, if you tick the box, one update list that stores the address you type. It does not ask you to create an account. If you allow statistics, a page view is stored as a date, a path and a count, with no address. The data it processes today is limited to the following.

• A language cookie named sov_locale, and a consent cookie named sovarenne-consent that stores whether you allowed statistics.
• Technical connection data that a normal web server and reverse proxy produce, such as IP address, date and time, the requested URL, the status code and the user-agent string. These are server logs, not a marketing profile.
• If you later use the separate control centre, that area processes account data, a session and multi-factor authentication material. Those records are not created by merely reading the public pages.
• The contact form asks for a name, an e-mail address, a subject and a message. It does not ask for identity documents, payment card data, health data or precise location.
• You should not send special-category data in the contact form. The form is not a channel for identity documents.

Each purpose below is tied to a limited legal basis. The Site does not reuse server logs for advertising. A page count runs only after you allow statistics and stores a date, a path and a number.

• Remembering your language choice, so the Site can present the locale you selected. The basis is the legitimate interest in providing a usable multilingual site, or your choice when you pick a language.
• Keeping the Site secure and diagnosing faults, on the basis of the legitimate interest in operating a reliable service and, where a security incident requires it, a legal obligation.
• Publishing only approved languages to search engines, which is a configuration of the Site and does not require a profile of you.
• The contact form stores your name, e-mail, subject and message so staff can read the enquiry. The basis is your consent, which the form asks for before submission. The message is not sent by e-mail and no mail provider is connected. There is no automatic booking.

The language cookie is stored for up to one year and can be removed in your browser at any time. Server logs are kept only for as long as the hosting environment needs them for security and operations. This policy does not invent a day-count that the infrastructure does not enforce.

Access to operational systems is limited to people who need it. Secrets are not written into the public pages. No method of transmission is perfectly secure; the Site does not claim that it is.

The Site does not sell personal data and does not use an advertising network. If you allow statistics, the page view stays on this Site as a date, a path and a count. No address is stored and no third-party analytics product is used. Recipients are limited to what the infrastructure actually requires.

• The hosting and network operators that deliver the Site and keep standard connection logs.
• A professional adviser, a competent authority or a court, if the law requires a disclosure. No such disclosure is routine.
• No payment provider and no mail-marketing platform are connected. Enquiry records stay in the Site database for staff. They are not delivered by e-mail.
• If a provider is connected later, this policy and the cookie policy will name the role it plays before non-essential processing starts.

Depending on whether GDPR, UK GDPR, the Turkish KVKK or another law applies to you, you may have the rights listed below. The Site does not decide that question for you.

• To be told what data is processed, as this policy does for the public Site.
• To ask for access, correction or deletion where the law gives you that right.
• To object to or restrict processing that is based on legitimate interest.
• To withdraw a consent, where processing was based on consent. The language cookie does not require an account.
• To lodge a complaint with a supervisory authority. The lead authority will be named when the operator registration is verified.
• Not to be subject to a decision based solely on automated processing that produces legal effects. The Site does not make such decisions.

A monitored privacy mailbox will be the verified e-mail published in the identity block on this page. Until that e-mail is verified, the Site does not pretend that a request address exists. You can still delete the language cookie in your browser.

The Site is aimed at adults who are exploring business information. It is not directed at children, and it does not knowingly collect a child profile.

Server infrastructure may be located outside your country. Standard connection logs can therefore be processed in the country where the host operates. No other international transfer of public-site data is in place. When the operator registration is verified, the relevant country will be stated in the identity block. Changes to this policy are published on this page with a new version and date. Version 1.2.0 is the text you are reading.