Cookie Policy

This English translation is provided for convenience. The Turkish text is the governing version.

In brief

The iwb.com.tr website does not use cookies or any similar browser storage. The IWB application uses only the first-party cookies and browser storage it needs in order to work: to keep you signed in, to protect your account, and to remember your interface preferences. No third-party cookies or measurement tools run on either the website or the application. Because we do not use any cookie that requires explicit consent, there is also no cookie preferences panel.

The company publishing this policy is the company responsible for the data processed through cookies with respect to iwb.com.tr and the cloud-hosted IWB application:

Firmanet Yazılım ve Teknoloji A.Ş. (“Firmanet”), Büyükkayacık OSB Mahallesi, 101. Cadde, InnoPark Konya TGB, B Blok, No:4/105, 42160 Selçuklu / Konya. Phone: +90 (312) 439 3940. Email: [email protected]

Firmanet refers to itself as “we” in this policy. Our general approach to personal data is set out in our Privacy Policy.

iwb.com.tr

The iwb.com.tr website does not write cookies to your browser, and it does not use local storage or any similar browser storage either. It does not load any analytics, advertising, map, video, or chat tools. Fonts are served from the website’s own server.

The demo and pricing forms do not use cookies either. To distinguish automated submissions, a signed timestamp is obtained when a form is first used. This value is held in a hidden field in the form and is sent together with the form; it is not stored in your browser.

External addresses such as the map, LinkedIn, and the status page open only when you click the link. Cookies set by the site that opens are subject to that site’s own policy.

The information written to the server access log when you visit the website is not a cookie. This record is described in the KVKK Privacy Notice: website and request forms.

The IWB application

The IWB application runs at app.iwb.com.tr, at customer-specific addresses in the form companyname.iwb.com.tr, and on the customer’s own domain. The application’s cookies are used only for session and security purposes, and all of them are first-party: they are written by IWB’s own server or by the application itself. No third-party cookies or measurement tools run.

When the application is installed on your own server, the same cookies run on the customer’s own server and domain; the information generated through these cookies does not reach us.

Cookies

Name	Purpose	Duration	Party	Type
iwb_cihaz	Counts your device toward the concurrent session limit. Contains a randomly generated identifier.	400 days	First-party	Strictly necessary: security
iwb_devir	Verifies that the session handover from the sign-in address to your workspace address takes place in the same browser.	120 seconds	First-party	Strictly necessary: security
iwb_devir_kaynak, iwb_devir_hedef	Verifies the session handover when you move to the customer’s own domain.	120 seconds	First-party	Strictly necessary: security
iwb_dms_share	Remembers that you have opened a password-protected file-sharing link and does not ask for the password again during this period.	2 hours	First-party	Strictly necessary: security
iwb_oturum_acik	When the “Remember me” option is off, ends your session when you close your browser.	For the duration of the browser session	First-party	Strictly necessary: session

None of these cookies is used for advertising, measurement, or tracking you on other websites.

Browser storage

In addition to cookies, the application uses your browser’s own storage, where it keeps the following:

• Session information: sign-in keys, your name, your email address, the workspaces you can access, and your list of permissions.
• Interface preferences: theme, table view, panel widths, and the last place you viewed.
• Draft: the text of a reply you have written in the help desk but not yet sent.

This information stays on your device. Your interface preferences and reply draft are not sent to the server. Sign-in keys are sent only with the requests you make to the application’s own server, to verify your identity.

Legal basis

The cookies and browser storage listed in this policy are necessary for the application to work, for the security of your account, and for the interface choices you make. For this reason, your explicit consent is not required. The legal bases we rely on under Law No. 6698 on the Protection of Personal Data (KVKK) are as follows:

Processing	Cookie or storage	Legal basis
Providing the IWB service: starting and maintaining the session, interface preferences, reply draft	iwb_oturum_acik; session information, interface preferences, and draft	KVKK Article 5(2)(c)
Security of accounts, sessions, and shared files	iwb_cihaz, iwb_devir, iwb_devir_kaynak, iwb_devir_hedef, iwb_dms_share	Our legitimate interest in information security, KVKK Article 5(2)(f)

The guidelines on cookies issued by the Personal Data Protection Authority (the Authority) also list session, authentication, user security, and interface customization cookies among the cookies that do not require explicit consent.

All of the cookies listed are first-party. Other data relating to users of the application is described in the Privacy Notice: customers, product users, business partners, and suppliers.

If measurement is added

At present, there is no visitor measurement on iwb.com.tr or in the IWB application. If we decide to add measurement or any other cookie that requires explicit consent, we will follow these rules:

• We will first update this policy. The new cookie’s name, purpose, duration, whether it is first-party or third-party, and its legal basis will be set out on this page.
• Cookies that require explicit consent will not run until you give your explicit consent. Visiting the website does not by itself constitute consent.
• On your first visit, we will present the accept, reject, and preferences options with equal weight, in the same color, size, and font size. Options that require explicit consent will be off by default.
• Not giving consent will not prevent you from using the website or the application; we will not use a cookie wall that makes content conditional on consent. We will not embed consent in the terms of use or any other text; we will obtain it as a separate choice.
• So that you can withdraw your consent at any time, a preferences link will remain available on the pages at all times. Withdrawal takes effect prospectively.
• The cookie that will be used to remember your choice will also be added to this policy, with its name and duration.
• If the measurement service is located outside Turkey, we will state the basis for the transfer under KVKK Article 9 in this policy and in the relevant privacy notice.

This section is a commitment. The preferences panel described here does not exist today, because we do not use any cookie that requires explicit consent.

Browser settings

In your browser’s settings, you can view, delete, or block cookies and clear site data (including browser storage). In most browsers, these settings are found under the privacy or security section.

• Because iwb.com.tr does not use cookies, these settings do not affect the website.
• If you block the IWB application’s cookies, you may not be able to sign in or to stay signed in.
• Clearing browser storage signs you out, resets your interface preferences to their defaults, and deletes unsent reply drafts.

You can exercise your rights regarding your data processed through cookies by the means described on the Data subject requests page.

Changes

When our use of cookies or browser storage changes, we update this policy; no new cookie is used before it is listed on this page. The governing language of this policy is Turkish; any version in another language is provided for information only.

The version and update date are shown at the top of this page. When we change the text, we publish the new version at this address; a change applies from the date it is published.