Privacy Notice
Last updated: 29.07.2026
This notice explains how personal data is processed on the Solamente Risk platform ("Platform") under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). The Turkish KVKK Aydınlatma Metni is the authoritative version of this notice.
1. Data Controller
The data controller is the operator of Solamente Risk. Contact: kvkk@solamenterisk.com
2. Categories of Data Collected
- Identity: name, e-mail, phone (optional)
- Company: NACE code, social security registry number, address, hazard class
- Visual: workplace photos uploaded for risk analysis
- Transactional: login times, IP address, user agent
- Usage: credit movements, analysis logs
3. Purposes and Legal Bases
- Performance of contract (KVKK art. 5/2-c): account creation, risk analysis service, credit management
- Legal obligation (KVKK art. 5/2-ç): audit records under OHS Law No. 6331
- Legitimate interest (KVKK art. 5/2-f): service quality, security breach detection, abuse prevention
- Explicit consent: marketing communication (optional)
4. Retention Periods
| Data | Retention period |
|---|---|
| Account data | While the account is active + 10 years (Turkish Commercial Code art. 82) |
| Risk analysis photos | 5 years for OHS audits (Law No. 6331) |
| Risk analysis result data | 10 years (audit evidence) |
| Transaction logs | 2 years |
| Audit logs (login, errors) | 1 year |
| Marketing preferences | Until consent is withdrawn |
5. Transfers
5.1 Domestic
Data is hosted on servers located in Türkiye and operated by us; each customer's data is kept in its own isolated database. Domestic sub-processors (e-mail service, SMS provider) access only the minimum data functionally required.
5.2 International (Limited)
Risk analysis images are transmitted to the Google Gemini API solely for analysis. According to Google, these images are not retained for model training and are deleted after the request completes. Your explicit consent for this transfer is obtained in the user agreement.
6. Your Rights (KVKK art. 11)
- Learn whether your personal data is processed
- Request information about processing
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties to whom data is transferred
- Request correction of incomplete or inaccurate data
- Request erasure or destruction under the conditions of KVKK art. 7
- Object to results of automated analysis that adversely affect you
- Claim compensation for damages caused by unlawful processing
7. Applications
To exercise your rights, submit a written application to kvkk@solamenterisk.com. Applications are free of charge and are answered within 30 days at the latest. If your request is rejected, you retain the right to lodge a complaint with the Turkish Data Protection Authority.
8. Security
Your data is protected with industry-standard encryption: TLS in transit and encrypted backups at rest. Passwords are stored with strong one-way hashing — never in plain text.
9. Cookies
This marketing site does not use marketing cookies. The session cookie (auth) in the application is mandatory and is used for technical purposes only.