Data Controller Information
Data Controller: tracerlens.com
Website: https://tracerlens.com
Contact Email: info@tracerlens.com
1. Purpose of Personal Data Processing
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by tracerlens.com for the following purposes:
- Conducting and managing membership operations
- User authentication and account security
- Creation and management of case records
- Conducting communication activities
- Fulfilling legal obligations
- Improving user experience
- Ensuring platform security
- Statistical analysis and reporting
- Prevention of fraud and abuse
2. Personal Data Processed
Your personal data in the following categories is processed on the tracerlens.com platform:
a) Identity Information:
- First name, last name
- Turkish ID number (optional)
- Date of birth (optional)
b) Contact Information:
- Email address
- Phone number
- Address information
c) Customer Transaction Information:
- Case record information
- Shared documents and images
- Transaction history
- User account information
d) Transaction Security Information:
- IP address
- Device information
- Cookie records
- Log records
- Browser information
3. Method of Data Collection
Your personal data is collected through the following methods:
- Registration and form processes on the tracerlens.com website
- Communication via email
- Automatic log records and cookies
- Case and notification forms
- User profile updates
4. Legal Grounds for Data Processing
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:
- Your explicit consent
- Direct relation to the establishment or performance of a contract
- Fulfillment of legal obligations
- Necessity of data processing for the establishment, exercise, or protection of a right
- Necessity for our legitimate interests, provided that the fundamental rights and freedoms of the data subject are not harmed
5. Transfer of Personal Data
Your personal data may be transferred for the realization of the purposes stated above to:
- Public institutions and organizations within the framework of legal obligations
- Service provider companies (hosting, security, data analysis, etc.)
- Competent authorities for conducting legal processes
- Our business partners (provided necessary security measures are taken)
may be transferred.
Important Notice on International Data Transfer
Notice Under Article 9 of KVKK:
The tracerlens.com platform is hosted on servers abroad. Therefore, when you use our platform, your personal data is transferred abroad under Article 9 of KVKK.
International Transfer Details:
-
Transfer Countries:
- European Union countries (countries determined by the Data Protection Authority to provide adequate protection)
- United States (may vary depending on data center location)
- Purpose of Transfer: System infrastructure, hosting services, cloud storage, data security, backup
-
Security Measures for Data Transfer:
- SSL/TLS encryption protocols (256-bit)
- Data centers compliant with international security standards (ISO 27001, SOC 2, etc.)
- Regular security audits and penetration tests
- Data encryption (both during transfer and storage)
- Access control and log recording systems
- 24/7 security monitoring
- Contractual Safeguards: KVKK and GDPR compliant data processing agreements have been signed with all third parties that process data. These agreements guarantee that personal data is processed only for specified purposes and adequate security measures are taken.
- Adequacy Decisions: For data transfers to European Union countries, "adequacy" decisions of the Personal Data Protection Authority are taken into account.
- Data Subject Rights: You can exercise all rights specified in Article 11 of KVKK for data transferred abroad (access, correction, deletion, objection, etc.).
Explicit Consent:
By using and/or registering on the tracerlens.com platform, you expressly consent to the transfer of your personal data abroad under the conditions and security measures specified above. You can withdraw this consent at any time and request the deletion of your data.
6. Method and Legal Basis of Data Collection
Your personal data is collected on the tracerlens.com platform electronically through automatic and manual methods within the scope of personal data processing conditions specified in Articles 5 and 6 of KVKK.
7. Your Rights Under KVKK
Under Article 11 of KVKK, you have the following rights:
- Learn whether your personal data is being processed
- Request information if your personal data has been processed
- Learn the purpose of processing and whether they are used appropriately
- Know third parties to whom your data is transferred domestically or abroad
- Request correction if your data has been processed incompletely or incorrectly
- Request deletion or destruction of your data under the conditions stipulated in Article 7 of KVKK
- Request notification of third parties about correction, deletion or destruction
- Object to adverse results from solely automated processing
- Request compensation for damages caused by unlawful processing of your data
8. How to Exercise Your Rights
To exercise the rights stated above, you can apply through the following methods:
- E-posta: info@tracerlens.com
- Written Application: Together with identification documents
- Through the Platform: From the account settings section
Your applications will be evaluated and concluded within a maximum of 30 (thirty) days depending on the nature of the request.
9. Data Security
As tracerlens.com, technical and administrative measures are taken to ensure the security of your personal data:
- Secure connection with SSL/TLS certificate
- Data encryption technologies
- Regular security tests and audits
- Access authorization systems
- Data backup systems
- Firewalls and intrusion detection systems
- Personnel training and confidentiality commitments
10. Retention Period
Your personal data is stored for the period required by the processing purposes and within the retention periods stipulated in relevant legislation. Upon expiration of the retention period, your personal data is deleted, destroyed, or anonymized.