1. Data Controller
Your personal data is processed by D Trace (the "Company") as data controller. Contact: info@dcube.com.tr · İstanbul, Türkiye.
2. Categories of Personal Data
- Identity: first and last name.
- Contact: email address, phone number.
- Professional: company name, job title.
- Request data: contact form subject and message, DPP readiness test answers.
- Customer transaction: platform account and permission data.
- Security and usage: session identifiers, page views and device data (if you accept analytics cookies).
3. Purposes
- Receiving and answering requests, questions and demo enquiries.
- Performing DPP readiness assessments and sharing results.
- Providing products and services and managing contracts.
- Creating and authorising platform accounts.
- Running information security processes.
- Analysing and improving website use.
- Fulfilling legal obligations.
4. Legal Bases
- Necessity for entering into or performing a contract (Art. 5/2-c).
- Compliance with a legal obligation (Art. 5/2-ç).
- Establishing, exercising or protecting a right (Art. 5/2-e).
- Legitimate interests, provided they do not harm your fundamental rights (Art. 5/2-f).
- Your explicit consent for analytics and third-party content cookies and for cross-border transfers (Art. 5/1, Art. 9).
5. Method of Collection
Data is collected electronically and partly automatically through the website contact form, the DPP readiness test, platform sign-up and sign-in screens, and cookies and similar technologies.
6. Transfers
Data may be transferred, limited to the purposes above, to our hosting, database and storage providers (Vercel Inc., Google LLC / Google Firebase) and to competent authorities upon request.
As our providers’ servers may be located abroad, data may be transferred outside Türkiye based on the safeguards in Article 9 of the KVKK, such as standard contracts or explicit consent.
7. Your Rights under Article 11
- Learn whether your data is processed and request information.
- Learn the purpose of processing and whether data is used accordingly.
- Know the third parties to whom data is transferred in Türkiye or abroad.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction under Article 7.
- Request notification of such actions to third parties.
- Object to outcomes against you arising solely from automated analysis.
- Claim compensation for damages caused by unlawful processing.
8. Applications
Send your requests with information identifying you to info@dcube.com.tr. Requests are concluded free of charge within 30 days; where the action requires an additional cost, the tariff set by the Personal Data Protection Board may apply.