GDPR Notice

Data Controller: Adencon (address: Bilişim Vadisi, Gebze/Kocaeli) registered company name, company registration no., tax ID, registered e-mail (KEP) address: to be completed. Under Turkish Law No. 6698 on the Protection of Personal Data, your personal data is processed by us as data controller within the scope described below.

Your personal data is processed to create and manage your account, provide the engineering calculation and design services you request, run supplier quote workflows, improve service quality, and fulfil our legal obligations.

Your data is stored on our servers in Germany (European Union); the server infrastructure is provided by netcup GmbH (Germany). Under Article 9 of Law No. 6698 this storage is a transfer abroad, and it is carried out with the safeguards required by the Law. In addition, your data may be transferred to service providers we work with — such as our email notification provider — only to the extent necessary to deliver the service and in accordance with applicable law.

Your personal data is collected electronically when you register, fill in forms, and use the platform, based on the legal grounds set out in Article 5 of Law No. 6698: being directly related to the establishment or performance of a contract, and compliance with a legal obligation.

Categories of data processed:

• Identity and contact data: name, email, phone, company name; for data protection requests also the Turkish ID number or passport number (stored encrypted), postal address and registered e-mail (KEP) address.
• Account data: the one-way hash of the password, role, language and notification preferences, time of last sign-in, the date and version of the Terms of Use accepted, and the site and page of sign-up; if turned on, the secret key of two-step sign-in (stored encrypted).
• Engineering project and design data: projects, calculation inputs and results, plant plans, incident and maintenance records.
• Messages and uploaded files.
• Usage and visit data: records of sign-ins (including failed attempts), calculations and project creation; page-visit statistics (page path, time spent on the page, the domain of our site visited and only the domain of the site that sent the visitor).
• Supplier business data.
• Technical logs (e.g. IP addresses kept for security purposes).

Error and speed records: when an error occurs on the platform — in your browser or on our server — we record the error message and where in the code it occurred, the address of the open page (without its query part), the last steps before the error (pages opened, buttons clicked, addresses of the requests made), the browser and operating system type and — if you are signed in — your account's internal ID. On roughly one visit in ten, how long the page took to load and to respond is also measured. Your name, email address, IP address, cookies and anything you type into forms are not part of these records. They are kept in error-tracking software (GlitchTip) running on our own server in Germany, are not shared with third parties, and are used only to find and fix errors and to make the platform faster.

Your personal data is retained for as long as required by the purpose of processing and by applicable statutory limitation periods, after which it is deleted, destroyed, or anonymized.

The records that are deleted or limited automatically in the application today are listed below; other data is kept for as long as your account remains active:

• In-app notifications: deleted after 90 days.
• Page-visit statistics: deleted after 13 months.
• Password-reset links: valid for 1 hour.
• Design and plan version history: the last 20 versions of each design or plan are kept.
• Error and speed records: deleted after 90 days.

Under Article 11 of Law No. 6698, you have the right to:

• learn whether your personal data is processed;
• request information about it if so;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties to whom it is transferred, domestically or abroad;
• request correction if incomplete or inaccurate;
• request deletion or destruction;
• request that correction/deletion be notified to third parties to whom the data was transferred;
• object to a result that is to your detriment arising solely from automated analysis;
• request compensation for damage arising from unlawful processing.

To exercise the rights above, use our Data Subject Request Form. Your request will be resolved within 30 days at the latest, as required by Article 13 of Law No. 6698.

To the extent we process the data of individuals based in the European Union, the General Data Protection Regulation (GDPR) applies in addition to Law No. 6698. Under the GDPR, you additionally have the right to receive your data in a structured, commonly used format and transmit it to another controller (data portability), to object to a decision based solely on automated processing, and to lodge a complaint with the supervisory authority in your country of residence. Your data is stored within the European Union (Germany). To the extent that we, as the controller, access it from or transfer it to Türkiye — which does not hold an adequacy decision from the European Commission — that transfer is safeguarded by a transfer mechanism such as the European Commission's Standard Contractual Clauses (SCCs).