Privacy Policy

This is our privacy notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It explains how we process your personal data when you visit the rng.tech website, use the forms on the site, send us your CV through our Career page, or contact us by e-mail or phone. Our forms refer to this text as the “Privacy Policy” or the “Privacy Notice”.

In short: We process the information you give in our forms to answer your request and to contact you. We automatically delete form records from our servers after 6 months and CVs after 12 months; for the copies in our mailboxes and in server backups, see section 8. We do not sell your personal data, and we do not send newsletters or bulk promotional messages. We use preference, statistics and marketing cookies only with your consent, except for YouTube videos that open when you click a video thumbnail; section 6 explains this exception and the other services that load regardless of your consent.

1. Data controller

Data controller: RNG Bilişim Teknolojileri Sanayi ve Ticaret Limited Şirketi (“RNG Bilişim”, “we”). rng.tech is operated by RNG Bilişim under the RNG Technology brand. The Turkish and English versions of the site have the same data controller. This notice covers the rng.tech website and your contacting us by e-mail or phone through the contact details on this site; the service portals and other websites linked from our site are covered by their own notices.

Address: Kozyatağı Nidakule, Değirmen Sk. No:18/19B Kat 10, Kadıköy/İstanbul, Türkiye
Istanbul Trade Registry No.: 239118-5
E-mail: info@rng.tech
Phone: +90 850 305 29 00

2. What data we process, and when

When you visit the site. Our server keeps an access log entry for every request: the time of the request and a random request ID, your IP address, the domain name requested, the request method and the page address (without query parameters), the response status, the amount of data transferred, the response times, the information your browser sends to identify itself (browser identification string), and the protocol and encryption version of the connection. We do not write the address of the referring page or the values of cookies to this log. Our server and the application that runs our site also keep error logs; if a rejected or failed request is written to the server’s error log, that entry also contains the time of the request, your IP address, the full request line (including query parameters), the domain name requested and, if there is one, the address of the referring page. The cookies placed in your browser and the third-party services your browser connects to are described in section 6 and in our Cookie Policy.

When you use our contact and quote request forms. The forms on the home page, the Contact page and our service pages ask for your company name, the service you are interested in, your first name, last name, phone number, e-mail address and message; the “Challenge” form on the home page asks for your first and last name, company name, e-mail address and message. We store the information you submit in our database, together with the name of the form and the time of submission. When a form is received from an e-mail address for the first time, the first name, last name, e-mail address, phone number, company name and the name of the form are also added to our list of potential customers. Depending on the type of form, the content of the form is also sent to the mailbox of our sales team (satis@rng.tech) or of our contact team (iletisim@rng.tech). This notification e-mail also shows the checkboxes you ticked; its subject line contains your first and last name, and its reply-to address is your e-mail address.

Optional consent to receive information. The contact form on the home page has a separate, optional box for giving your explicit consent to receiving information by e-mail, SMS and notifications. Even if you do not tick this box, your form is processed in the same way. If you give your consent, we may send you announcements and information about our products and services through these channels. We do not currently send newsletters or bulk promotional messages; if we start doing so, we will send them only to people who have given their consent, and in accordance with the applicable legislation. You can withdraw your consent at any time by writing to info@rng.tech.

When you use the “Start Now” links. The “Start Now” links on the site take you to start.rng.tech, where you can apply for our cloud services. RNG Bilişim operates that page as well; the information you give there is covered by that page’s own Privacy Notice.

When you send your CV through the Career page. We process the CV file you upload on the Career page and the information it contains (for example your identity, contact, education and work experience details and, if included, your photograph). The file is stored on our server in a way that cannot be accessed from the internet, and it is sent as an e-mail attachment, under the file name you gave it, to our human resources team (ik@rng.tech). Please do not include special categories of personal data in your CV, such as data about your health, religion or religious sect, appearance, membership of an association, foundation or trade union, or criminal convictions; we do not need them to assess your application. You do not need to include a photograph either.

When you e-mail or call us. We process your name, your contact details, the content of your correspondence or call and any other information you share about your request, in order to answer it. Our e-mail correspondence is stored in our business mailboxes on Microsoft 365.

3. Purposes and legal bases

Answering your request, preparing quotes and contacting you by e-mail or phone (form records, the list of potential customers, correspondence, appointments booked through OnceHub): if you made the request on your own behalf, KVKK Art. 5(2)(c) (directly related to the conclusion of a contract); if you made it on behalf of a company or asked a general question, KVKK Art. 5(2)(f) (our legitimate interest in answering your request and establishing a business relationship).

Assessing your job application and contacting you about a suitable position (your CV is also considered for new openings for 12 months): KVKK Art. 5(2)(c) (directly related to the conclusion of an employment contract) and Art. 5(2)(f) (our legitimate interest in identifying suitable candidates). If you do not want to be considered for new openings, you can write to ik@rng.tech; we will then delete your CV once your application has been concluded.

Sending optional information messages: KVKK Art. 5(1) (explicit consent); only if you ticked the box for it.

Securing and operating the site, the forms and our systems (server and error logs, filtering out automated submissions with reCAPTCHA and a trap field, fixing errors): KVKK Art. 5(2)(f).

Loading the third-party components needed to display the site (the cookie consent tool, fonts, JavaScript libraries), the cookieless measurement signals that Google Analytics sends if you have not allowed the Statistics category, and the opening of a YouTube video when you click a video thumbnail without having allowed the Marketing category (section 6): KVKK Art. 5(2)(f).

Preference, statistics and marketing cookies and the services that depend on them (Google Analytics cookies and its user-provided data collection feature, the Mapbox map, loading the OnceHub appointment booking tool and its language preference, YouTube videos embedded in pages): KVKK Art. 5(1) (explicit consent); only if you allowed the relevant category in the cookie consent window.

Recording your cookie choices, answering applications about your rights and meeting requests from competent authorities that are based on the law: KVKK Art. 5(2)(ç) (fulfilling our legal obligations) and Art. 5(2)(e) (establishing, exercising or protecting a right).

The required checkboxes in our forms are only for you to state that you have read and understood this notice; they are neither an approval nor an explicit consent. We process your form data on the legal bases above, not on your explicit consent. We ask for your explicit consent only for optional information messages and for non-essential cookies. We do not use your data for any purpose not stated in this notice.

4. How we collect your data

We receive the information in forms, appointment bookings and CVs directly from you, electronically through the forms on the site and the appointment booking tools we use; we receive the information in e-mail correspondence electronically and the information in phone calls orally, from you, when you contact us. Server logs, cookies and the data of the services listed in section 6 are collected electronically and by automated means while your browser communicates with our site and with these services.

5. Who we transfer your data to

Only our employees responsible for these tasks and our system administrators can access form records and CVs. We do not sell your personal data. Your data may be transferred only to the recipients below, for the purposes stated:

AuthSMTP (GetOnline Ltd, United Kingdom; some relay servers in the United States): our e-mail delivery service. It relays the form notifications and the application e-mails containing your CV file.

Microsoft 365 (Microsoft; data centres in the European Union): our business e-mail service. Form notifications, CV e-mails and your correspondence with us are stored in our teams’ mailboxes.

Third-party services we use on the website: Google (reCAPTCHA, Google Tag Manager, Google Analytics, YouTube), Usercentrics (Cookiebot), Adobe (Adobe Fonts), Cloudflare (cdnjs), Mapbox and OnceHub. Section 6 explains which data reaches these providers and when.

Competent public authorities: only where the law requires it, and only to the extent requested.

6. Third-party services and cookies on the website

We manage your cookie choices on our site with Cookiebot. Cookies in the Preferences, Statistics and Marketing categories are not set until you allow the relevant category, except in the YouTube video windows described below, and the services that depend on these categories do not run until you allow them, except as stated below. Some of the services listed below, however, load regardless of your consent. When a service loads, your browser connects to that provider’s servers, and technical information such as your IP address and browser identification string reaches the provider.

Services that load regardless of your consent

Cookiebot (Usercentrics A/S, Denmark): shows the cookie consent window and records your choice. Your decision, the time of the decision, a consent ID, a truncated form of your IP address and your browser information are recorded by Cookiebot. Cookiebot’s files are served through a content delivery network based in the United States.

Google reCAPTCHA (Google): protects our forms against automated submissions and loads on all our pages. To tell humans from bots, it sends Google data such as your IP address, your browser and device information and your interactions with the page. When you submit a contact or quote request form, our server asks Google for the result of the check.

Adobe Fonts (Adobe, United States): the fonts on the site are loaded from Adobe’s servers on every page; Adobe counts page views to keep track of the font licence.

Google Tag Manager and Google Analytics (Google): load on every page. If you have not allowed the Statistics category, Google Analytics uses no cookies and stores no identifier in your browser, but it sends cookieless measurement signals to Google. These signals contain the address and title of the page opened, the address of the referring page if there is one, events such as page views, time spent on the page, scrolling, clicks and form interactions, time information and technical information about your browser (for example its language, the screen resolution and the browser and operating system versions); your IP address also reaches Google when your browser connects.

cdnjs (Cloudflare, United States): a JavaScript library on the Private Edge Cloud page is loaded from here.

In addition, while a page is loading, your browser may download in advance the files of the OnceHub appointment booking tool (on all pages) and of the Mapbox map (on the Contact page); when it does, your IP address and browser information reach these providers. These services do not run until you allow the relevant category.

YouTube video windows (Google): when you click a video thumbnail on some of our pages, the video loads from YouTube in a window even if you have not allowed the Marketing category. Your browser then connects to YouTube and to Google’s advertising services (doubleclick.net); YouTube sets cookies in your browser and processes information about the videos you watch.

Services that run only with your consent

Google Analytics (Google; Statistics): measures how our site is used. For this purpose it processes the pages you open, the time you spend on them, events such as scrolling, clicks on external links, file downloads and form interactions, your approximate location and your device and browser information, and it sets the _ga and _ga_# cookies in your browser. In addition, because Google Analytics’ user-provided data collection feature is switched on, if you have allowed the Marketing category, contact details that you enter in our forms, such as your e-mail address and phone number, may be detected on the page and sent to Google in hashed form.

Mapbox (Mapbox Inc., United States; Statistics): shows the map on the Contact page and writes an ID to your browser’s local storage to measure how the map is used.

OnceHub (OnceHub Inc., United States; Preferences): shows the online appointment booking tool on our pages and stores your language preference in your browser. If you book a meeting with this tool, the information you enter (for example your name, your e-mail address and the date and time you choose) is processed in OnceHub’s systems and your booking is passed on to us.

YouTube (Google; Marketing): shows the videos on some of our pages. Videos embedded in pages do not load until you allow this category; the windows that open when you click a video thumbnail, however, load regardless of your consent, as described above. When a YouTube video loads, YouTube uses cookies and similar technologies and processes information about the videos you watch; if you are signed in to your YouTube account, it may link this information to your account.

The names, purposes and durations of the cookies, and how you can change your choice, are set out in our Cookie Policy.

7. Transfers abroad

Our website’s servers, the contact and quote request form records and the CV files are on our company’s own infrastructure in Türkiye. However, because we use the services listed in sections 5 and 6, your personal data is transferred abroad:

European Union: Microsoft 365 (form notifications, CV e-mails and correspondence) and Cookiebot (cookie choices).

United Kingdom and United States: AuthSMTP (the e-mails it relays and the records about these e-mails).

United States and other countries where the providers operate: Google, Adobe, Cloudflare, Mapbox, OnceHub and Cookiebot’s content delivery network (the technical data described in section 6; measurement and usage data, and the hashed values of the contact details you enter in forms, if you have given your consent; the details of appointments you book through OnceHub).

These transfers result from our use of these services; sections 5 and 6 explain the purpose for which we use each of them. The data of the services that depend on the Preferences, Statistics and Marketing categories is transferred only if you allow the relevant category; the advance downloads, the cookieless measurement signals and the YouTube video windows described in section 6 are the exceptions.

8. Retention periods

Contact and quote request form records and the entries in the list of potential customers (including the system records relating to them): 6 months (180 days) from the date they are created. When this period ends, they are deleted by an automatic process that runs every hour.

CV files: 12 months (365 days) from the date they reach our server. When this period ends, they are deleted by the same automatic process.

Server access and error logs: 15 days at most.

Application error logs: deleted automatically, oldest first, as they reach their size limit.

Copies in our teams’ mailboxes (form notifications, CV e-mails, correspondence): we do not yet apply an automatic deletion period to these copies. At your request, we delete copies that are no longer needed to handle your request, your application or any business relationship that may follow. Correspondence that leads to a business relationship is kept for the retention periods required by legislation such as the Turkish Commercial Code.

AuthSMTP’s records: the content of e-mails is deleted after delivery; sender and recipient addresses, subject lines and technical header information are kept by AuthSMTP for 6 years and 1 month and are not deleted even on request. Because the subject line of form notifications contains your first and last name, and their header information contains your e-mail address as the reply-to address, this information is also in these records.

Cookies: the periods stated in our Cookie Policy; your cookie choice is kept for 12 months.

Server backups: deleted records may remain in the backups of our servers until the retention period of these backups ends.

Under Article 7 of the KVKK, we delete, destroy or anonymise personal data for which this notice states no separate period once the purpose of the processing no longer applies and the retention periods required by the applicable legislation have ended.

9. Security

Your connection to the site is encrypted (HTTPS), and we hand form e-mails to our delivery service over an encrypted connection. Only our authorised employees and system administrators can access form records and CV files; CV files cannot be accessed over the internet. We make no decision about you that is based solely on automated processing and that significantly affects you. If the automatic checks we use to protect our forms (reCAPTCHA and the trap field) reject your submission, you can reach us by e-mail.

10. Your rights

Under Article 11 of the KVKK, you can apply to us to exercise the following rights:

(a) to learn whether your personal data is processed;
(b) to request information about the processing if your data has been processed;
(c) to learn the purpose of the processing and whether your data is used in line with that purpose;
(ç) to know the third parties in Türkiye or abroad to whom your data is transferred;
(d) to ask for your data to be rectified if it has been processed incompletely or incorrectly;
(e) to ask for your data to be erased or destroyed under the conditions of Article 7 of the KVKK;
(f) to ask for the actions taken under (d) and (e) to be notified to the third parties to whom your data was transferred;
(g) to object to a result against you that arises from the analysis of the processed data exclusively by automated systems;
(ğ) to claim compensation if you suffer damage because of unlawful processing.

You can withdraw your consent to processing based on explicit consent (the optional consent to receive information and your cookie consents) at any time; withdrawal does not affect the processing carried out up to that date.

11. How to apply

E-mail: to info@rng.tech, either from an e-mail address that you have previously given us and that is registered in our system (for example the address you used in a form), or signed with a secure electronic signature or a mobile signature.

Post: to our address in section 1, with a signed letter.

In your application, please state your first and last name, your Turkish ID number (for foreign nationals, your nationality and passport number or, if you have one, your identity number), your residential or business address for official notifications, an e-mail address or phone number for notifications (if you have one) and your request (Communiqué on the Procedures and Principles of Application to the Data Controller). We may ask for additional information to verify your identity. We conclude your application as soon as possible according to its nature and within 30 days at the latest, as a rule free of charge; if the action involves an additional cost, the fee in the tariff set by the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) may be charged.

If your application is refused, if you find our answer insufficient or if we do not answer in time, you can complain to the Turkish Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of the date of your application (www.kvkk.gov.tr).

12. Changes

We update this notice when our purposes or methods of processing change. Before we process your data for a new purpose not stated in this notice, we will inform you separately. The current version is always published on this page.

Last updated: 15 October 2026

About Us

Resources

News

Contact

Career

Events

Workpartners

IaaS

Public Cloud Service

BaaS

Backup as a Service

DRaaS

Disaster Recovery as a Service

BCaaS

Business Continuity as a Service

How Can We Help?

Head Office

Sales

Support

Marketing

General Information

How Can We Help?