Information Notice on the Processing of Personal Data under KVKK

The data controller is Remzi Yapar. RemyaTech is a brand used by Remzi Yapar.

For your questions about the processing of your personal data and for applications under KVKK, you can contact us at info@aqualoncc.com. The contact location is Ankara, Türkiye.

The following data may be processed while Aqualon Control Center is used:

• Identity and contact information: Name, surname, username, email address, phone number if provided, and company information.
• Account and authorization information: User account, user type, company and station assignments, access levels and account status.
• Security and transaction records: Records kept for authentication, sessions, authorization and system security.
• Service usage records: Transactions performed on the platform and records required for the service to operate technically.
• Operational station data: Sensor measurements, measurement times, station statuses, relay information, maintenance/calibration events and other technical data present in the system.

Station and sensor measurements are primarily technical data belonging to the operator; not every measurement record is personal data by itself. However, if a record can be associated with an identified or identifiable natural person, its nature under personal data legislation is assessed separately.

Account and contact information is processed for:

• Creating and managing the user account,
• Authentication and enforcement of authorizations,
• Accessing the companies and stations the user is authorized for,
• Service-related communication and support,
• Account security and prevention of unauthorized access.

Station and sensor data is processed for:

• Receiving and storing field measurements in the cloud,
• Accessing historical measurements,
• Generating charts and reports,
• Monitoring station statuses,
• Running alarms and notifications,
• Providing the service technically and investigating issues.

Operational sensor data is not used as marketing data, and different customers are not permitted to access each other's data.

Personal data is processed within the applicable processing conditions under Article 5 of Law No. 6698 (KVKK), depending on the nature of the processing activity.

For example:

• KVKK Art. 5/2(c), to the extent necessary for account creation, user identity verification and delivering the service required under the contract.
• KVKK Art. 5/2(ç), for transactions required to fulfil legal obligations.
• KVKK Art. 5/2(f), where applicable, for necessary and proportionate processing such as information system security and prevention of misuse, balanced against the fundamental rights of data subjects.

Data may be obtained in electronic environments through:

• Registration and account forms,
• Authorized user transactions,
• The Aqualon web panel and mobile applications,
• The service's APIs and integrations,
• Measurement records from devices, local software and sensors at stations,
• Security and transaction records created while the service operates.

Access to data in Aqualon is restricted by user type and assigned authorizations:

• The Aqualon Admin has the management access required to operate the platform and provide technical support.
• Company users can access only the stations assigned to their own company for which they hold access rights, and the data belonging to those stations.
• Station users can access only the stations assigned to them and the data belonging to those stations.
• Access to the measurement data of other customers or companies is not possible unless explicitly authorized.

Sensor/measurement data is not sold to independent third parties, not shared for advertising, and not made available to other customers.

While operating the service, technical service providers such as cloud hosting, infrastructure and email providers may process the technical data necessary to deliver their services.

If personal data is transferred abroad, the appropriate mechanism under Article 9 of KVKK and related legislation is assessed separately.

Account and contact data is processed for as long as necessary to maintain the service relationship. After the relationship ends, data is deleted or anonymized considering the period required by the processing purpose, applicable legal retention obligations, dispute management and security needs.

Retention of station and sensor data is necessary for the service to provide historical measurements, reports and monitoring functions. Deletion of this data may not in every case be the same operation as deletion of the account.

When an account is deleted, account information is anonymized and active sessions and station access are removed. Station measurement history is not deleted by this operation. Database backups are retained for 14 days; expired backups are deleted. Records that must be retained by law are handled within applicable retention obligations.

Under Article 11 of KVKK, data subjects have the right to request information about their personal data, to access it, to request correction of inaccurate or incomplete data, to request deletion or destruction where processing conditions cease to exist, and to exercise other legal rights, within the conditions set out in the legislation.

Applications can be sent to info@aqualoncc.com. Identity verification and applicable application procedures are carried out; applications are assessed within the periods stipulated in the legislation.

Technical support requests and KVKK applications are assessed separately.