Personal Data Notice (KVKK)

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by DeepGTR (the "Data Controller") as described below.

1. Data controller

• Name: DeepGTR
• Address: Ferhuniye Mh. Ahmet Hilmi Nalçacı Caddesi No:28/E
• MERSIS No: —
• Email: —
• Registered email (KEP): —
• Phone: —

2. Personal data we process

• Identity and contact: full name, email address, mobile phone number.
• Customer transactions: purchased credit packages, order codes, payment status, credit history, bank transfer sender name and note, your requests and suggestions and our replies.
• Billing: the billing address, city and postcode passed to the payment provider for card payments.
• Security: an irreversible hash of your password (the password itself is never stored), session data, sign-up and last sign-in IP addresses and dates.
• Location and content: coordinates you enter for analysis, device outputs you upload (images, raw data files, measurement tables), the results produced from them and the questions you ask about them.
• Marketing: your consent to commercial messages and when it changed.
• Cookies: essential cookies and, only if you consent, usage data collected by measurement cookies. See the Cookie Policy.

We never receive or store your card details; card payments take place on the licensed payment provider's secure page.

3. Purposes

• Creating your account, authentication and account management,
• Running coordinate and device-data analyses, producing reports and keeping them in your account,
• Selling credits, taking and verifying payments, invoicing and performing the distance sales contract,
• Sending transactional messages such as order, password reset and support replies,
• Handling requests, suggestions and complaints,
• Keeping information and transactions secure and preventing abuse, fake accounts and unauthorised access,
• Meeting legal obligations and requests from competent authorities,
• With your consent, sending news, campaign and announcement emails and measuring site usage.

4. Legal grounds

We process your data on the following grounds under Article 5 of the KVKK:

• It is necessary for entering into or performing a contract (membership, analysis service, credit sales),
• It is necessary to comply with our legal obligations (tax and commercial law, Laws No. 6502 and 6563 and their regulations),
• It is necessary to establish, exercise or defend a right,
• It is necessary for our legitimate interests, provided your fundamental rights are not harmed (security, improving the service).

Commercial messages and measurement cookies rely solely on your explicit consent.

5. How we collect data

Electronically, by automated or partly automated means, through the sign-up, payment, analysis and feedback forms, the files you upload, cookies and server logs.

6. Recipients

Limited to the purposes above, your data may be shared with:

• The licensed payment provider (Shopier) and the banks involved,
• Suppliers of servers, hosting, email delivery and backups,
• Cloud-based image processing and analysis providers we use to process and interpret your device outputs,
• With your consent, measurement providers (Google Analytics, Meta),
• Our accountants and legal advisers,
• Competent public authorities and courts, upon request.

Your coordinates are used to fetch open satellite, terrain, magnetic and soil data for that area; your identity and contact details are not sent to those data providers.

7. Transfers abroad

Some of our cloud image processing and analysis providers, email infrastructure and measurement providers have servers outside Türkiye. These transfers comply with Article 9 of the KVKK and, where there is no adequacy decision, rely on appropriate safeguards such as the standard contracts published by the Personal Data Protection Board, or on the other conditions set out in the Law. Uploaded device outputs are sent only with the content needed for the analysis, without your identity or contact details.

8. Retention

• Account and analysis data: while your account exists, and afterwards for the statutory limitation period for possible disputes,
• Order, payment and invoice records: 10 years under tax and commercial law,
• IP and security logs: up to 2 years,
• Commercial message consent records: 3 years after consent is withdrawn.

Data past its retention period is deleted, destroyed or anonymised.

9. Your rights

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions of the Law,
• Request that third parties who received your data be notified of such correction, deletion or destruction,
• Object to a result against you arising solely from automated analysis,
• Claim compensation for damage caused by unlawful processing.

10. How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request:

• In writing to: Ferhuniye Mh. Ahmet Hilmi Nalçacı Caddesi No:28/E
• By registered email (KEP) to: —
• From the email address registered in your account to: —

Requests are answered free of charge within 30 days at the latest. If the request involves an additional cost, the fee set by the Board may be charged.