Draft prepared for review by Roltek's legal counsel. Not legal advice.
Last updated: [Effective date]
This information notice is given under Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It is a summary; the full details are in our privacy policy.
1. Data controller
Roltek A.Ş. (Roltek Teknoloji), Megapol Çarşı Kule, Halkapınar Mah. 1203/11. Sk. No: 5-7, Kat 9, Ofis 98, 35170 Konak, İzmir, Türkiye, MERSİS no. [MERSİS no.] ("Roltek"). Contact: info@hermetry.com, KEP: [KEP address].
2. Whose data this notice covers
Visitors of hermetry.com; people who contact us or request a demo; community forum members; contact persons of customers, prospects, partners and suppliers; and users of Hermetry platform accounts, for the account, billing and security data Roltek processes as controller. Data that customers process inside their own Hermetry workspace (telemetry, device data and their users' data) is processed by Roltek as data processor on the customer's behalf; the customer is the controller of that data and gives its own notice.
Purposes and legal grounds
| Purpose of processing | Legal ground (KVKK Art. 5(2)) |
|---|---|
| Answering enquiries and demo requests; preparing offers | (c) necessary for the establishment of a contract; (f) legitimate interest |
| Opening and running accounts; providing the platform and support | (c) necessary for the performance of a contract |
| Invoicing, accounting and tax duties | (ç) compliance with a legal obligation |
| Information security, prevention of abuse, logging under Law No. 5651, audit logs, the AI firewall | (ç) legal obligation; (f) legitimate interest |
| Running and moderating the forum, AI translation of posts and the help bot | (c) contract; (d) data made public by the data subject; (f) legitimate interest |
| Establishing, exercising or protecting our rights; answering authorities | (e) establishment, exercise or protection of a right; (ç) legal obligation |
| Marketing communications | Art. 5(1) explicit consent, given separately and withdrawable at any time |
3. Method of collection
We collect personal data partly or wholly by automated means through the website, the contact form, the forum, the Hermetry platform, its sign-in providers and cookies or similar technologies; and by non-automated means through e-mail, phone, meetings and written correspondence, including from your employer or a colleague who invites you.
4. Recipients and purpose of transfer
For the purposes above and within the conditions of Articles 8 and 9 KVKK, we may transfer personal data to: our service providers (hosting in the EU, US and Türkiye regions, e-mail and SMS delivery, payment processing, support tools, and Anthropic PBC for forum translation and the forum help bot); the customer that controls the workspace you use; sign-in providers you choose; professional advisers; and authorised public institutions and courts where the law requires it.
Transfers abroad are made under Article 9 KVKK, in particular with the Board's standard contract notified to the Authority within five business days, or another safeguard or exception listed there.
5. Your rights under Article 11 KVKK
You have the right to learn whether your data is processed; request information about it; learn the purpose of processing and whether it is used accordingly; know the recipients in Türkiye or abroad; request correction; request deletion or destruction; request that correction, deletion or destruction be notified to recipients; object to an outcome against you arising solely from automated analysis; and claim compensation for damage from unlawful processing.
Apply in writing to our address, by KEP to [KEP address], with a secure electronic or mobile signature, or by e-mail to info@hermetry.com from the address registered with us, as set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer free of charge within 30 days at the latest. See section 11 of the privacy policy for what to include.