DOC CITY doccity.netData controller
DocCity's Moscow and Istanbul offices are two desks of the same team. For processing that takes place in Türkiye the data controller is the Istanbul business; processing in Russia is subject to Russian law (152-FZ). This text covers the Türkiye side.
Address: Eclipse Maslak, Anka Sk. No: 5, Block C · Maslak Mah., 34485 Sarıyer / Istanbul · Email: info@doccity.net · Phone: +90 555 575 0001
This information is being updated. You can send requests on this point to info@doccity.net.
What we collect
There is exactly one place on this site where we ask for personal data: the enquiry form. This is everything it asks for, and there is nothing else.
- Name — required. So we know how to address you.
- Your message — required. So we understand what you are asking for.
- Phone — optional. Only if you type it.
- Email — optional. Only if you type it.
- The service you are interested in, your preferred contact channel, which office you are writing to, and the language of the page.
- If you used the apostille tool, the source and destination country codes you selected.
Two records you did not type
When you submit the form the server keeps two further technical records, neither of which identifies you:
Your IP address is NOT stored in the clear. It is mixed with a secret key (HMAC-SHA256) and only the digest is written. That is enough for us to recognise repeated submissions from the same address, and not enough for anyone who obtains the record to recover the address.
Your browser string (user agent) is digested and truncated the same way.
Personal data is NOT written to logs: name, phone, email and similar fields are masked before the log line is produced.
Why we process it
One purpose only: to come back to you and work on your request. Your enquiry is given a tracking code, and you can check the status of your file yourself with that code.
What you write into the form is NOT used for marketing, profiling, ad targeting or automated decision-making. No advertising component reads the content of your enquiry.
The site also carries conversion measurement that runs only on your explicit consent, so that we can see which advert and which page actually bring work in. Refuse it and it never runs; accept it and it still never sees what you typed into the form. The cookie policy sets out how it works.
Legal basis
Processing rests on Article 5(2)(c) of Law No. 6698: it is directly related to the conclusion or performance of a contract. You request a service; we process the data so we can respond to that request.
Where your request requires compliance with a legal obligation (a notarial or consular procedure, for example) Article 5(2)(ç) also applies.
Who we share it with
The content of your enquiry is passed to an institution only when carrying out the work requires it, and only to the extent required: notary, sworn translator, governorate, ministry, consulate, university. We tell you what will be sent where before the work starts.
The content of your enquiry goes to no advertising network, no analytics provider and no data broker. The site does carry measurement tools, but they do NOT see what is in the form: your name, phone, email and tracking code are never sent to them — only the fact that a form was submitted. Details are in the cookie policy.
Data is stored on Supabase (PostgreSQL). Where transfer abroad is involved, the conditions in Article 9 of Law No. 6698 apply.
This information is being updated. You can send requests on this point to info@doccity.net.
How long we keep it
The enquiry record is kept for the period required by applicable legislation after the work is completed, and then deleted or anonymised.
This information is being updated. You can send requests on this point to info@doccity.net.
Your rights
Article 11 of Law No. 6698 gives you the right to learn whether your data is processed, to request information about it, to learn whether it is used for its purpose, to know the third parties it is transferred to at home or abroad, to have it corrected if incomplete or wrong, to have it deleted or destroyed, to have those actions notified to the parties it was transferred to, to object to analysis carried out solely by automated means, and to claim compensation for damage.
How to apply is set out on a separate page: Data subject request.