Legal

KVKK Notice (Turkish Data Protection Law)

Under Turkey's Law No. 6698 on the Protection of Personal Data (“KVKK”), any personal data you submit through datacalyx.com is processed by DatacAlyx in the capacity of data controller.

Data processed and purpose

The contact/pilot form processes your name, email address, subject and message to respond to your request and contact you. We record the privacy notice version and reading declaration timestamp. Security uses a one-way IP hash with a secret salt, window start and attempt count; raw IP, browser information and tracking data are not stored in the contact database. Please avoid sharing patient information or other sensitive personal data.

Legal basis

Your data is processed based on legitimate interest in answering your request and securing the service. The notice reading declaration is not explicit consent or a newsletter subscription.

Transfers

Your personal data is not shared with third parties for marketing purposes except where required by law. Contact records are stored on Cloudflare Pages and D1 infrastructure outside Turkey. If notifications are enabled, messages are sent to info@datacalyx.com through the Cloudflare Email Workers send_email binding. Technical service providers may access data only as necessary to provide the service. Brevo is not used.

Retention

Contact records have a 90-day retention period; rate-limit hashes have a 24-hour period. An automatic deletion cron has been configured to run every five minutes. The operator is also responsible for deleting email notification copies. Notice version: iletisim-2026-10-07-v1.

Your rights

Under Article 11 of the KVKK you may, among others, learn whether your data is being processed, request its correction or deletion, and object to processing — by writing to info@datacalyx.com.

Optional visit analytics is covered by the separate analytics privacy notice.

Analytics — Privacy Notice

Data controller: Datacalyx Yazılım Teknolojileri A.Ş.; its address and contact details appear in the company information below. Optional analytics starts only when you select “Accept analytics” in the cookie banner. Rejection does not affect the contact form, newsletter or website. Contact and newsletter choices are separate from analytics consent.

Collection, data and purpose: After consent, automatic electronic requests from your browser send pageviews and engagement measurements to Plausible. Page URLs contain only the origin and path; query parameters, URL fragments (including newsletter confirmation tokens) and form contents are excluded. The provider processes referral information, browser/device type and approximate location to produce statistics. Network requests expose IP addresses and browser information for daily visitor counting and approximate location; according to the provider’s policy, raw IP and User-Agent strings are not stored, and the daily identifier salt is rotated and deleted every 24 hours. The purpose is to improve the website using visit statistics; we do not use advertising profiling.

Processing and transfers: Analytics requires your explicit consent. The service provider is Plausible Analytics (Plausible Insights OÜ, Estonia); requests are processed on EU infrastructure outside Türkiye. The banner discloses this overseas processing before acceptance. Analytics sets no cookies; the Plausible data policy describes the data processed and its storage practices.

Storage and withdrawal: Your accept/reject preference is stored only in this browser’s localStorage under dcx_analitik_onay, until you clear browser data or change the preference. It is not sent to our server as a consent record. The provider uses event and session records to produce aggregate statistics. Select “Reject” through “Cookie preferences” in the footer to withdraw consent; the page reloads to stop the loaded tracker and it is not loaded again. For rights under KVKK Article 11 and requests to delete previous analytics data, contact info@datacalyx.com. Notice version: analitik-2026-10-07-v1.

Newsletter — Privacy Notice

Data controller: Datacalyx Yazılım Teknolojileri A.Ş., Görükle Mah. Üniversite-1 Cad. Ulutek Teknoloji Geliştirme Bölgesi No:933 İç Kapı No:B027, 16285 Nilüfer/Bursa; MERSİS 0271210934100001; KEP datacalyxyazilim@hs01.kep.tr.

We collect your email, optional name, consent date and text version, signup/confirmation status and any expiring confirmation link through the web form. For security and rate limiting we process a one-way hash derived from your IP address; raw IP addresses are not stored in the newsletter database. These data manage your request, verify your address, send newsletters after confirmation and limit abuse. The notice acknowledgement, newsletter consent and consent to hosting abroad are separate.

Collection method and legal grounds: Newsletter signup data are collected through the web form, automatically in an electronic environment. Managing signup requests, verifying the email address and sending newsletters after confirmation rely on explicit consent (KVKK Article 5/1). At both signup and confirmation endpoints, automatic electronic processing of a one-way IP-derived hash for rate limiting and security relies on the controller’s legitimate interest (KVKK Article 5/2-f), including requests from people who have not given consent. Each form submission is stored as a separate unverified consent event; repeat submissions do not change the existing subscriber’s consent version or date.

Data are transferred to and hosted on Cloudflare infrastructure and D1 outside Türkiye, with restricted access and your separate explicit consent. When Brevo is activated it will be added as the email delivery recipient; this notice and any necessary consent flow will be updated before data are transferred. No data are currently transferred to Brevo and no emails are sent.

Unconfirmed records are retained for 90 days from initial signup; rate-limit hashes for 24 hours from their window start. A maintenance job deletes expired records every five minutes (up to five minutes until the next run). Confirmation links expire after 48 hours; used or expired links and token hashes are removed. Each form submission’s consent event is retained for the same period as its associated subscriber record and destroyed with that record. Confirmed records are retained until consent is withdrawn; withdrawal stops delivery and destroys the subscription record and pending confirmation link through an authorised operator.

To withdraw consent or exercise your rights under KVKK Article 11, including correction and deletion, contact info@datacalyx.com. Consent text version: bulten-2026-10-07-v3. The signup form is in Turkish (Türkçe).

Privacy Policy

We value your privacy. The information we collect via datacalyx.com and how we use it is described below.

• Information collected: Name, email, subject, message and notice reading declaration in the contact form; email, optional name and consent evidence in the newsletter form. A one-way IP hash is used for security.
• Analytics: Plausible visit statistics require separate acceptance; see the analytics notice for scope and withdrawal.
• Use: To respond to your request and to contact you about the pilot program.
• Retention: Data is kept only as long as the processing purpose requires, then deleted.
• Security: Reasonable technical and organizational measures are taken to prevent unauthorized access.
• Contact: For any privacy request, write to info@datacalyx.com.

Terms of Service

By using this website you agree to the following terms.

• Site content is for informational purposes and may change without prior notice.
• The DatacAlyx name, logo and site content are protected intellectual property and may not be reproduced without permission.
• The site presents products intended for healthcare professionals; no content on the site constitutes medical advice, diagnosis or treatment.
• No warranty is given that services will be uninterrupted or error-free; liability is limited to the extent permitted by applicable law.

Cookie Policy

Analytics (optional): Plausible provides visit statistics without cookies. Even when analytics is configured, no provider script or analytics request loads before explicit acceptance; acceptance is not the default. The banner offers accept and reject options. When analytics is disabled the banner is not shown. See the analytics privacy notice for details.

Preference storage: The dcx_analitik_onay localStorage key stores only your accept/reject choice; it is not an analytics cookie or visitor identifier. Use “Cookie preferences” in the footer to change it. If browser storage is unavailable, your choice applies only to the current page; analytics asks for consent again on the next page.

Other resources: The site may load third-party fonts such as Google Fonts; their technical request logs are separate from analytics consent. You can manage cookies and local storage through browser settings. We do not use marketing cookies.