Skip to content
TurOS

Data Protection Notice

Last updated: 2026-10-24

Pursuant to Article 10 of the Turkish Personal Data Protection Law no. 6698 ("KVKK"), we wish to inform you, as data controller, about the processing of your personal data.

1. Data controller

Your personal data is processed by the data controller whose details appear below.

Legal name
HBK SOFTWARE LTD
Address
31 Marrow Drive, Liverpool L7 0AB, United Kingdom
Email
[EMAIL]
Company number
13320244
Registered in
England and Wales

2. Personal data processed

Identity and contact data submitted through the demo request form: contact person's name, email address, phone number (optional). Professional/corporate data: company name, country and market, number of users, the modules you are interested in and your free-text message. Transaction security data: the IP address the request was sent from and the time of submission.

3. Purposes of processing

Your data is processed in order to assess your demo request, contact you, open a trial environment preloaded with sample data, prepare a licence quote suited to your needs, and prevent abuse submitted through the form.

4. Legal basis

Your personal data is processed on the legal bases set out in Article 5(2)(c) of the KVKK — processing directly related to the conclusion or performance of a contract — and Article 5(2)(f) — processing necessary for the legitimate interests of the data controller — together with the explicit consent you give before submitting your request.

5. Method of collection

Your data is collected electronically and by automated means, by your completing and submitting the demo request form on this website.

6. Transfers

Your personal data is processed only for the purposes above. To handle your request we use the following service providers, and your data is therefore processed abroad: Hetzner Online GmbH (the servers that record requests), Cloudflare, Inc. (domain and network services; requests pass through Cloudflare's network), Resend, Inc. (sending the email confirming receipt of your request and the notification to our team; a US-based company sending from its EU region in Ireland) and Google LLC (Gmail; the mailbox where our team receives the notification for each new request). Data may be transferred to authorised public institutions within our legal obligations.

7. Retention period

The site's copy of your request is deleted 30 days after it reaches our request system. In our request system, rejected requests are anonymised 90 days after the decision, open requests 180 days after they arrived, and approved requests 90 days after the firm's installation has been separated. The notification email our team receives for a new request carries your company name, your name and your email address; it stays in our team's mailbox on Google (Gmail) and is not covered by the anonymisation above.

8. Your rights under Article 11 of the KVKK

By applying to the data controller you may exercise the following rights:

  • To learn whether your personal data is being processed
  • To request information if it has been processed
  • To learn the purpose of processing and whether the data is used accordingly
  • To know the third parties to whom it is transferred, domestically or abroad
  • To request correction if it has been processed incompletely or inaccurately
  • To request erasure or destruction under the conditions of Article 7 of the KVKK
  • To request that corrections, erasures and destructions be notified to third parties to whom the data was transferred
  • To object to a result against you arising from analysis solely by automated systems
  • To claim compensation if you suffer damage due to unlawful processing

9. How to apply

You may submit requests concerning your rights, together with documents verifying your identity, in writing to our address above or from the email address registered in our system to [EMAIL]. Your application is concluded within thirty days at the latest.