Cookie Policy

This Cookie Policy has been prepared by KÖSTEBEK Araştırma Teknoloji Ticaret Anonim Şirketi (“KÖSTEBEK” or the “Company”), as data controller, to inform persons visiting the main website at www.mol-e.co about data processing activities carried out through cookies and similar technologies.

This Policy covers only the main website. Cookies used in App MOL-E and Project MOL-E areas are explained in the separate cookie policies for those areas.

Cookies are small text files stored on the browser or device by the website visited. Similar technologies such as local storage may also be used to remember a preference on the device. These technologies perform limited technical functions such as ensuring the website operates securely, preserving language preference, providing form security and remembering that an information message was dismissed.

On the main website, only strictly necessary cookies and similar technical records required for the secure and proper operation of the site, application of the user’s requested language preference and protection of form/communication areas against abuse are used.

No cookies are used on the main website for performance/analytics measurement, advertising, marketing, retargeting, social media tracking pixels or user profiling. Therefore, under the current usage structure, explicit consent via “Accept All”, “Reject” or a preference panel is not required.

The “Got it” button on the site is not an explicit consent or approval statement; it only dismisses the cookie information message. This preference may be remembered in the browser’s local storage.

According to the technical review conducted on 30.07.2026, the following mandatory records and security components are used on the main website. Cloudflare security cookies may be created only when the relevant security feature or verification process is triggered.

If the name, provider, purpose or retention period of a cookie or similar record changes due to technical configuration, this table is updated before the new usage begins.

Through strictly necessary cookies and similar technologies, limited technical data required for the basic functions of the website may be processed, including cookie or local storage identifier, IP address, connection date and time, device and browser information, selected language, security and risk signals, and form verification information. Content and contact information entered in the contact form is not cookie data and is processed under the Main Website Visitor Privacy Notice.

Strictly necessary cookies and similar technologies are processed for operating the website securely and functionally, detecting malicious or automated traffic, ensuring form security, applying the user’s expressly requested language preference and not showing the information message again.

This data is processed pursuant to KVKK Art. 5/2-f based on the legal ground that processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. KVKK Art. 5/2-c may also apply for processes directly related to securely receiving form or communication requests. Explicit consent is not obtained separately for strictly necessary cookies.

Data is collected electronically, wholly or partly by automated methods, through browser, device, server, CDN, security infrastructure, cookies and local storage when accessing the main website and using site features.

Personal data obtained through cookies and similar technologies may be transferred to infrastructure, hosting, CDN and security service providers to the extent necessary for operating, hosting, securing and providing technical support for the website; and to public institutions and organizations, courts and administrative authorities authorized by law for fulfilling legal obligations or protecting rights.

Cross-border transfer may occur only to the extent necessary for providing the relevant technical service, due to the infrastructure of the technical services actually used, including Cloudflare security/CDN services and Google reCAPTCHA, being located abroad or data being accessed from abroad within the scope of these services.

These transfers are carried out pursuant to Article 9 of the KVKK by means of an adequacy decision or by providing one of the appropriate safeguards; where the GDPR applies, transfers are carried out in accordance with the conditions set out in Chapter V of the GDPR. Except for transfers arising from these technical services, personal data obtained through cookies or similar technologies is not transferred abroad.

There is no optional cookie on the main website that requires explicit consent or a preference. Users may block or delete cookies through browser settings and clear local storage records. However, if strictly necessary cookies are blocked, language selection, form security and some parts of the website may not work properly.

Pursuant to Article 11 of the KVKK, by applying to the Company you have the right to learn whether your personal data is processed; to request information if processed; to learn the purpose of processing and whether it is used in accordance with its purpose; to know the third parties to whom it is transferred domestically or abroad; to request correction of incomplete or incorrectly processed data; to request deletion or destruction when conditions are met; to request that correction, deletion or destruction operations be notified to third parties to whom the data was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing.

Requests under the KVKK may be submitted in writing to the Company’s address below, via registered e-mail (KEP), using secure electronic signature or mobile signature, or via [email protected] from an e-mail address previously notified to the Company by the data subject and registered in the Company’s systems.

If the purpose, provider, duration or transfer structure of cookies or similar technologies used changes, this Policy is updated before the new technology begins to be used. If performance/analytics or advertising/marketing cookies begin to be used, these cookies are kept off by default depending on user preference and the necessary explicit consent mechanism is established separately. The current Policy applies as of the date it is published on the main website.