Privacy Notice (KVKK)

The data controller is TrustLayer. Address: İstanbul / Türkiye. Contact: security@trustlayersec.com. These details will be updated with the registered trade name and address once the corporate structure is in place.

Your data is processed for three purposes: responding to your demo request and arranging a meeting, answering your questions in an initial technical conversation, and working out which deployment model suits you. It is used for nothing else, and it is not added to a marketing list.

The email you send is hosted on Google Workspace, which we use as our corporate mail infrastructure. Google is a processor for this, and its servers are outside Türkiye; processing your email is therefore a transfer abroad. The transfer is carried out under the Cloud Data Processing Addendum agreed with Google and the standard contractual clauses it incorporates. Beyond this, your personal data is not shared with third parties and is never sold.

The demo form processes only the fields you fill in: name, work email address, organisation, your role, an estimated number of users, your preferred deployment model, and a message if you write one. The form does not submit to a server; what you type never leaves your browser, and pressing Send opens your own email client. The decision to send, and the sending itself, stay with you; the data reaches us only if you send that email. The legal grounds are that processing is directly related to the formation of a contract (KVKK art. 5/2-c) and our legitimate interest in replying to you (art. 5/2-f). It does not rest on your explicit consent, so no consent declaration is requested. Correspondence is kept for three years and deleted at the end of that period.

Under article 11 of the Law you have the right to: learn whether your personal data is processed; request information about it if so; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred at home or abroad; have it corrected if incomplete or inaccurate; have it erased or destroyed where the conditions are met; have corrections and erasures notified to those third parties; object to a result reached against you through analysis by automated systems alone; and claim compensation for damage arising from unlawful processing.

You can send requests about your rights to security@trustlayersec.com. Your request will be answered within thirty days at the latest. We may need to verify your identity before we can act on it.