1. Who we are
Origis IPPM Sınai Mülkiyet Ltd. Şti. ("Origis IPPM Ltd.", "we", "us"), Osmanağa Mah. Nuri Duyguer Sk. No:8, Kadıköy, İstanbul, Türkiye, MERSİS no. 1234567890123456, is the data controller for the personal data collected on origisippm.com. You can contact us about this notice or your data at [email protected]. General contact: [email protected], phone +90 506 894 74 84.
This notice explains what personal data we collect through the forms on this site and by email, why we collect it, how long we keep it, who receives it, and your rights under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).
2. What we collect
"Request a search" form: your name, email address, company, the trademark you want searched, the type of trademark (word, logo, word and logo, or not sure yet), a note about the logo, the countries you are interested in, the goods or services you offer under the trademark, and the version of this notice shown to you.
"Book a consultation" form: your name, email address, what you would like to talk about, the trademark, the countries, how you would like to talk (phone call, video call or written exchange by email), the days and times that suit you, and the version of this notice shown to you.
"Privacy request" form: your name, email address, the kind of request you make, optionally the details of your request, and the version of this notice shown to you.
Emails you send us: your email address and anything you choose to include.
We use this information only to reply to your request and to prepare the search or consultation you asked for. Please do not enter identity numbers, health information, payment details or passwords in the forms.
3. What we do not collect
We do not store your IP address, the forms do not accept file uploads, and we do not use your data for marketing. We do not sell your data and we do not make automated decisions about you. We do not send you automatic emails; a person writes every reply.
4. Who sees your request
Your request is delivered to our mailbox ([email protected]; privacy requests also to [email protected]) and, except for privacy requests, recorded in our internal case system, which only authorised members of our team can open. We do not match your request with other databases and we do not share it with anyone other than the recipients listed in section 5.
5. Service providers, other recipients and transfers outside Türkiye
- Cloudflare, Inc. (United States; global network) hosts our website and forms and protects them against bots (Cloudflare Turnstile). To deliver the page and check for bots, Cloudflare necessarily processes technical data such as your IP address; we do not receive or keep that IP address. Cloudflare also tells our site which country your connection comes from, so that we can show the right language section; we do not store it.
- Zoho Corporation B.V. (Netherlands) delivers your request to us by email. Our Zoho Mail account is hosted in Zoho's European Union data centre.
- Cavus IP (Can Çavuş) runs our internal case system in Türkiye on our behalf, as our data processor. It does not store your IP address, and what you type into a form is not written to its log files.
- Partner firms abroad, only when you ask us to arrange a dispute. We share with the partner in the country concerned only the information that matter needs, and only for that matter.
- Public authorities, only where we are legally required to disclose data.
Because Cloudflare and Zoho operate outside Türkiye, using the forms involves a transfer of your personal data abroad. We are putting in place the safeguards required by Article 9 of KVKK for these transfers; until then we limit what we collect to what is needed to answer your request.
For the GDPR, Cloudflare's transfers to the United States rely on the EU–U.S. Data Privacy Framework and on the EU Standard Contractual Clauses set out in Cloudflare's data processing addendum. Each provider's own privacy notice is available on its website.
When you ask us to arrange a dispute, the data protection rules of the partner's country may differ from yours. This is an occasional transfer, necessary to perform our contract with you and to establish, exercise or protect a legal right (KVKK Art. 9(6); GDPR Art. 49(1)(b) and (e)).
A table of what data goes where, and who can see it, is in our Data record.
6. How long we keep your data
We keep each request, together with the notes and status records our team adds to it, for 12 months from the date we receive it. After that it is deleted automatically. Request emails in our mailbox are deleted within the same 12-month period. We delete a request earlier if you ask us to. Deleted requests may remain in our backup copies for up to 35 days, after which the backups are overwritten.
If you become a client, we open a separate client file. Only your name or company, email address, trademark and country details may be copied into it from your request. We keep client files, together with related dispute records, for 10 years after the file is closed, because of our record-keeping obligations and to protect our legal rights.
Technical data processed by Cloudflare is kept under Cloudflare's own retention policies.
7. Legal bases
- Answering your request and preparing the search or consultation: the processing is necessary to take steps at your request before a possible contract (KVKK Article 5(2)(c); GDPR Article 6(1)(b)).
- Keeping our team's notes and status records for 12 months, recording which version of this notice you were shown, and keeping the site and forms secure: our legitimate interest in managing requests properly, being able to show that we informed you, and protecting the site (KVKK Article 5(2)(f); GDPR Article 6(1)(f)).
- Answering your privacy requests: compliance with our legal obligations (KVKK Article 5(2)(ç); GDPR Article 6(1)(c)).
- Client files: performance of our contract with you, compliance with our legal obligations and the establishment or defence of legal claims (KVKK Article 5(2)(c), (ç) and (e); GDPR Article 6(1)(b) and (f)).
We do not ask for your consent, because none of this processing depends on it.
8. Cookies
If you choose a language from the language menu, the site remembers that choice in a cookie ("origis-lang") for up to one year, so that the next page opens in the same language. It contains no personal data. Cloudflare may use strictly necessary security cookies or similar technologies to protect the site. We do not use advertising or analytics cookies. See our Cookie Policy.
9. Your rights
Under Article 11 of KVKK you may ask us whether we process your data and for information about that processing; learn its purpose and whether it is used for that purpose; learn the third parties in Türkiye or abroad to whom it is transferred; ask us to correct incomplete or inaccurate data, or to delete it, and to notify the recipients of the correction or deletion; object to a result against you that arises only from automated analysis; and claim compensation if you suffer damage from unlawful processing. Where the GDPR applies you also have the rights of access, rectification, erasure, restriction, data portability and objection (including objection to processing based on our legitimate interest).
Please use our privacy request form or write to [email protected]. We answer free of charge within 30 days (under the GDPR, within one month).
Under KVKK, you must first apply to us. If we reject your application, if you find our answer insufficient, or if we do not answer in time, you may complain to the Turkish Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application. Where the GDPR applies, you may also complain at any time to the supervisory authority in the EU country where you live or work.
10. Changes
If we change this notice, we publish the new version on this page with a new version date. The version shown to you when you submit a form is recorded with your request.