Log inSip your brand!

GDPR Privacy Notice

This notice explains how we process the personal data of visitors from the European Economic Area (EEA), Switzerland and the United Kingdom when they use sipnik.com: the application and contact forms, the chat assistant at the bottom right, and the website itself. It is provided under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and, where applicable, the UK GDPR and the Swiss Federal Act on Data Protection. For visitors in Türkiye, our KVKK privacy notice applies.

Who is responsible

The controller is Bink Teknoloji Sanayi Ticaret Limited Şirketi (“Bink”, “we”), a company established in Türkiye that operates sipnik. Contact for all privacy matters: [email protected] · +90 850 241 93 21.

What data we process

  • Identity and contact: full name, phone number, email address.
  • Business details: business name, city, number of branches, business type, your message, and the values you enter for estimates in the application form.
  • Chat assistant: the name and mobile number you give at the start of the chat; the chat content (your messages and the assistant’s replies); the page you were on while writing; your location, only if you choose to share it; and, when you start a chat, the list of the last pages you visited on sipnik.com in this browser (page name, time spent, how much was read). That list stays in your browser and is not sent to us before you start a chat. Voice typing uses your browser’s own speech recognition; only the resulting text reaches us.
  • Usage statistics: anonymous visit counts without cookies — the page, referring site, campaign parameters, device type, screen size, language and country. Visitors are counted with a value derived from the IP address and browser that is reset every day and cannot be traced back to you.
  • Security and technical data: IP address, browser information, time of requests, applications and messages, and the chat assistant’s visitor ID (cookie).

Why we process it and on what legal basis

  • Handling your application, contacting you and preparing an offer — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Running the chat assistant — answering your questions, taking into account the pages you looked at, handing the chat over to our team when needed and recording an application you make in the chat — on the basis of your consent given with the checkbox at the start of the chat (Art. 6(1)(a)) and, for applications, pre-contractual steps (Art. 6(1)(b)).
  • Showing your chat history again — our legitimate interest in a continuous conversation (Art. 6(1)(f)).
  • Anonymous usage statistics — our legitimate interest in understanding how the website is used and improving it (Art. 6(1)(f)).
  • Security and preventing misuse (spam, automated applications, heavy off-topic use of the chat assistant) — our legitimate interest in protecting our services (Art. 6(1)(f)). For this purpose the number of chat messages is limited, and numbers and IP addresses that misuse the chat may be blocked from it.
  • Legal obligations — where the law requires us to keep or disclose data (Art. 6(1)(c)).

We do not send you marketing messages without your separate consent. Providing your data is voluntary; without your name and phone number we cannot process an application or start a chat, but you can always reach us by email.

Who receives your data

  • Hosting and infrastructure: our servers and the form and customer-relationship infrastructure operated by our business partner Collobr, and Cloudflare, which delivers and protects the website.
  • Chat assistant AI providers: your chat messages and the chat context are sent to OpenAI (USA) to generate replies and, if that service is unavailable, to Google (USA) as a fallback.
  • WhatsApp: if you move from the chat to WhatsApp with “Continue on WhatsApp”, WhatsApp’s (Meta’s) terms also apply to that conversation.
  • Authorities: only where required by law.

We do not sell your data or share it for advertising.

Transfers outside the EEA

We are established in Türkiye, and chat records and applications are stored on our servers in Türkiye; chat messages are also processed in the USA by the AI providers above. These countries are not covered by a general adequacy decision of the European Commission. Transfers take place on the basis of appropriate safeguards where available, such as the European Commission’s Standard Contractual Clauses or, for US recipients certified under it, the EU–US Data Privacy Framework, and otherwise on the basis of your explicit consent given at the start of the chat (Art. 49(1)(a)) or because the transfer is necessary for steps you requested before a contract (Art. 49(1)(b)). You can ask us for more information about these safeguards at [email protected].

How long we keep it

  • Applications and chat records: deleted or anonymised no later than 2 years if no business relationship is established; if one is established, for the duration of the relationship and the legal retention periods.
  • Server access logs: up to 1 year, for security.
  • Usage statistics: kept only in anonymous form.

Cookies and storage in your browser

We do not use advertising or tracking cookies. The chat assistant sets a single functional cookie (sps_z, valid for 1 year) only for visitors who start a chat, so that it can recognise you and show your history again. Your chat view, the pages you visited (see above) and your country and language choice are kept in your browser’s local storage; to suggest your country, the website asks Cloudflare in your browser which country your connection comes from, and this result is not stored by us. You can delete all of this in your browser settings.

Automated decisions

The chat assistant generates replies automatically, but it does not take decisions that have legal or similarly significant effects on you (Art. 22 GDPR). Our team reviews every application.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future by writing to [email protected]. We reply within one month. You also have the right to lodge a complaint with the data protection supervisory authority of your country of residence or work, or of the place of the alleged infringement.

Last updated: 30 October 2026