This notice explains how personal data submitted through vesselproof.com is processed, in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Economic Area, the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Alex Bilişim, which develops VesselProof and operates this website. You can reach us at the email address below for any question or request about your personal data.
2. Data we process
- Pilot request form: name, work email, company and the forms you want to digitize; optionally fleet size, vessel type, segment, current process and private deployment preference. We also store a request number, the page language and the submission time.
- Technical data: your IP address is used in memory to limit repeated submissions and protect the service. Web server logs may record the IP address, time, requested address and browser information.
- Page counts: the server counts page requests using only the page path and time. These counts do not store your IP address, referring page or browser details.
- Optional analytics: only if you accept, Google Analytics sets the _ga and _ga_* cookies and collects page interactions, device, browser, approximate location and traffic source.
- Your analytics choice is stored in your browser’s local storage. The site sets no other cookies.
Data is collected electronically through the website form and automatically through the server and, with your consent, the analytics tool.
3. Purposes and legal bases
- Responding to your pilot request, assessing pilot fit and preparing a proposal: steps directly related to establishing a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) and our legitimate interest in answering business inquiries (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
- Keeping the site secure, preventing abuse and counting page requests: our legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
- Google Analytics and the related transfer abroad: your explicit consent (KVKK Art. 5/1 and Art. 9; GDPR Art. 6(1)(a)), which you can withdraw at any time.
4. Recipients and transfers
Pilot requests are stored in a restricted database on servers operated by Alex Bilişim. We do not sell personal data. Automatic notifications about new requests contain only a request number, not your details. When we reply by email, our email provider processes the correspondence.
If you accept analytics, data is transferred to Google, which may process it in countries outside Türkiye and the EU, including the United States. Data may also be shared with public authorities where the law requires it.
5. Retention
Pilot requests are kept for 24 months after our last communication, then deleted or anonymized. If a pilot or contract follows, the related records are kept for the contract term and any statutory retention period. Server logs are kept for a limited period for security. Google Analytics data is kept for no longer than 14 months.
6. Your rights
Under KVKK Article 11 and the GDPR you have the right to:
- Learn whether your personal data is processed and request information about it.
- Learn the purpose of processing and whether data is used accordingly.
- Know the third parties in Türkiye or abroad to whom data is transferred.
- Request correction of incomplete or inaccurate data, and deletion or destruction of data, and ask that these actions be notified to recipients.
- Object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.
- Under the GDPR, you may also request restriction of processing and data portability, object to processing based on legitimate interest, and withdraw consent at any time.
Send your request by email. We respond free of charge within 30 days at the latest. You may also complain to the Turkish Personal Data Protection Authority or, in the EEA, to your local supervisory authority.
7. Scope
This notice covers the vesselproof.com marketing website only. Private VesselProof pilot and customer deployments run in the customer’s environment; the processing of operational records there is governed by the customer agreement.