KVKK Personal Data Notice
This notice is prepared under article 10 of Türkiye's Personal Data Protection Law no. 6698 ("KVKK"), by [COMPANY LEGAL NAME] ("the Company", "Data Controller"), regarding the personal data processed about you through the ThreatSight platform.
1. Data Controller
- Legal name: [COMPANY LEGAL NAME]
- Address: [FULL ADDRESS]
- MERSIS / Tax No: [MERSIS NO]
- Email / KEP: [[email protected]] / [KEP ADDRESS]
2. Personal Data Processed
- Identity: full name.
- Contact: email address, the organization/company you work for.
- Transaction security: IP address, session records, login/access logs, browser information.
- Customer activity: your query/scan history on the platform, the records and comments you create.
3. Purposes of Processing
- Creating your account, authentication and access authorization.
- Providing the service and ensuring its security and the prevention of abuse.
- Meeting legal obligations and handling requests/complaints.
4. Legal Grounds
Your personal data is processed under KVKK art. 5 on the grounds that it is necessary for the conclusion/performance of a contract, the data controller's legal obligation, and legitimate interest provided it does not harm your fundamental rights and freedoms; and, where required, based on your explicit consent.
5. Transfers
Your data may be shared, on a limited basis, with the following suppliers/infrastructure providers for the delivery of the service (domestic/abroad):
- Hosting provider: [PROVIDER / COUNTRY]
- Cloudflare (bot protection / Turnstile, network security) — [abroad]
- Error monitoring (Sentry, if enabled) — [abroad]
- Email delivery provider — [PROVIDER]
Transfers abroad are carried out by meeting the conditions required under KVKK art. 9.
6. Retention Period
Your personal data is kept for the period required by the processing purpose and prescribed by the relevant legislation; at the end of that period it is deleted, destroyed or anonymized. [RETENTION PERIOD TABLE to be added]
7. Your Rights as a Data Subject (KVKK art. 11)
You have the right to learn whether your personal data is processed, to request information if it is, to learn whether it is used in line with its purpose, to request the correction of incomplete/incorrect data, to request its deletion/destruction when the conditions are met, and to object to a result against you arising solely from automated analysis of the data.
8. Application
You can submit requests regarding your rights via [APPLICATION METHOD: email/KEP/written]. Your applications are concluded within 30 days at the latest.