Privacy Notice for the Demo Request Form (KVKK)
Metalmetre Yazılım Satış ve Pazarlama A.Ş. (“Metalmetre”) processes the personal data you share through the demo request form as data controller under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”). This notice is provided under Article 10 of the KVKK.
This notice was originally prepared in Turkish. In case of any discrepancy, the Turkish text prevails.
1. Data Controller
Metalmetre Yazılım Satış ve Pazarlama A.Ş., Akdeniz Mah. Şehit Fethibey Cad. Heris Tower No:55 İç Kapı No:091 Konak/İzmir, Türkiye, [email protected]
2. Personal Data We Process
- Identity: full name
- Contact: email address, phone number
- Request details: company name and your description of how you plan to use Metalmetre
- Transaction security: the date and time the form was submitted, your confirmation that you read this notice, and your consent choice
- Marketing: the ad click identifier (gclid), if you reached our site through a Google ad
Please do not include special categories of personal data, such as health or religious information, in the free-text field.
3. Purposes and Legal Grounds
Your identity, contact and request details are processed to assess your demo request, contact you, arrange a demo or trial access, and prepare an offer that fits your request, on the legal ground that processing is directly related to the conclusion of a contract (KVKK Article 5/2-c).
The submission time and your confirmation and consent records are processed to demonstrate that we fulfilled our duty to inform you and to evidence your consent choice, on the legal ground that processing is necessary to establish, exercise or protect a right (KVKK Article 5/2-e).
The ad click identifier is processed to identify which advertisement your request came from and to measure advertising performance, on the legal ground that processing is necessary for our legitimate interests, provided that this does not harm your fundamental rights and freedoms (KVKK Article 5/2-f). Your name, email address and phone number are not sent to Google for this purpose.
If you give your explicit consent, your email address and phone number are processed to measure the performance of our Google Ads campaigns (matching form submissions to ad interactions), on the legal ground of your explicit consent (KVKK Article 5/1). These data are hashed with the SHA-256 algorithm in your browser before they are sent to Google. Not giving consent has no effect on how your demo request is handled.
Your personal data may also be processed to respond to requests from competent public authorities, on the legal ground that processing is necessary for us to fulfil our legal obligations as data controller (KVKK Article 5/2-ç).
4. Transfers of Personal Data
Your personal data are transferred, only for the purposes above, to the following recipients:
- Google (Google Workspace): our email service provider, to deliver the form notification by email and keep the related correspondence
- Akamai Technologies (Linode): our cloud hosting provider for the servers that run our website and this form (servers located in Frankfurt, Germany)
- Cloudflare: our network and security service provider, which relays requests to our website, including form submissions, to our servers securely and quickly (content delivery and protection against attacks)
- Google (Google Ads): to measure advertising performance, the ad click identifier and, only if you give your explicit consent, hashed versions of your email address and phone number
- Competent public authorities: to fulfil our legal obligations, upon request and to the extent permitted by law
Because these providers’ servers are located outside Türkiye (including European Union countries and the United States), these transfers are transfers abroad and are carried out in accordance with Article 9 of the KVKK. The transfer of your email address and phone number to Google Ads relies solely on your explicit consent. The Personal Data Protection Board has not issued an adequacy decision for the destination countries, so there is a risk that these countries do not offer the same level of protection as Türkiye and that it may be harder for you to exercise your rights over your data.
5. Method of Collection
Your personal data are collected electronically, partly by automated means, when you fill in the demo request form on our website. If you reach our site through a Google ad, the ad click identifier is read from the link address or from a cookie stored in your browser for this purpose.
6. Retention
Your personal data are kept for as long as the processing purposes require and for the limitation periods set out in the applicable legislation. When these periods end, the data are erased, destroyed or anonymized.
7. Your Rights
Under Article 11 of the KVKK, you may apply to Metalmetre to exercise the following rights:
- Learn whether your personal data are processed
- Request information about the processing
- Learn the purpose of the processing and whether the data are used in line with that purpose
- Know the third parties in Türkiye or abroad to whom your data are transferred
- Request correction of incomplete or inaccurate data
- Request erasure or destruction of your data under the conditions in Article 7 of the KVKK
- Request that corrections, erasure or destruction be notified to the third parties to whom your data were transferred
- Object to a result against you that arises exclusively from automated analysis of your data
- Claim compensation for damage caused by unlawful processing of your data
You may withdraw your explicit consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
8. How to Apply
You can send your requests, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to our address above, or by email to [email protected] from an email address you have previously given us and that is registered in our systems. Your request will be concluded free of charge within thirty days at the latest, depending on its nature. If the request requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.