Disclosure Text and Explicit Consent Statement

1. Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data will be processed by Soltudo Teknoloji Anonim Sirketi (the "Company") as the data controller, in a manner that ensures your security within the framework of the procedures and principles set out below. This disclosure text has been prepared by the Company acting as the data controller under the scope of the Law No. 6698 on the Protection of Personal Data ("KVKK") and the European Union General Data Protection Regulation ("GDPR").

Data Controller: Soltudo Teknoloji Anonim Sirketi (MERSIS NO: 0773089353800001)

Address: Kalaba Mahallesi Kutukcu Alibey Caddesi No: 2/B Ic Kapi No:106 Kecioren/ANKARA

Data Controller Email Address: [Email address to be specified]

2. Scope and Purpose

This text has been prepared to explain the purposes for which your personal data specified below will be processed, the legal grounds, and the circumstances under which they may be transferred, by the Company (Soltudo Teknoloji Anonim Sirketi) acting as the data controller under the Law No. 6698 on the Protection of Personal Data ("KVKK"), when you use the digital platform named Person Eye (the "Application").

The Application (Person Eye) is a system that enables users to assess their mental performance and fatigue levels through gamified tests. Your personal data is processed in order to provide you with more accurate feedback based on your test results and usage behaviour within the application, and to determine your performance level.

During this process, your personal data is processed for the following purposes:

  • Personalisation of the application experience,
  • Analysing test results to provide personalised feedback,
  • Providing visualised reports to corporate customers,
  • System security and improvement,
  • Fulfilment of legal obligations

3. Processed Personal Data

The personal data collected within the scope of the Application are as follows:

  • Identity Information: Name, surname
  • Contact Information: Email address, phone number
  • Demographic Information: Age, city
  • Professional Information: Occupation, employer information
  • Application Usage Data: Test results, performance level, usage frequency
  • Technical Data: IP address, device model, session duration
  • Transaction Security Data: Session records, transaction logs

5. Transfer of Personal Data

5.1. Transfer to Corporate Customers (Profile Analysis)

Your collected personal data is analysed within the application and visualised results regarding your performance are presented to corporate customers (e.g., your employer). This transfer is based on your explicit consent and is made solely for the purpose of providing performance awareness.

Corporate users, when using the application for the evaluation of their employees, are obligated to obtain the necessary explicit consents from employees and fulfil their disclosure obligations under the Law No. 6698 on the Protection of Personal Data.

5.2. Transfer of Personal Data Abroad

Your personal data is obtained through fully automated electronic means through the application during your use of Person Eye; your data may be transferred abroad based on your explicit consent pursuant to Article 9 of KVKK, within the scope of tools such as Airtable, Google Forms, website hosting services, email and IT servers.

5.3. Non-Marketing Usage Restriction

Your data will in no way be transferred to third parties for advertising, commercial promotion, or direct marketing purposes.

6. Corporate User Responsibility

Corporate users, when using the Application (Person Eye) for the evaluation of their own employees, are obligated to obtain explicit consent from the relevant employees and properly fulfil the disclosure obligation under the Law No. 6698 on the Protection of Personal Data.

All administrative, legal, and criminal liability that may arise from the violation of these obligations belongs entirely to the relevant corporate user. The Company (Soltudo Teknoloji Anonim Sirketi) cannot be held responsible in any way for any damage, administrative sanction, or dispute that may arise in this context.

7. Disclaimer and Purpose of Use Limitation

Person Eye has been developed solely for the purpose of individual awareness, mental performance tracking, and supporting personal development. The test results provided through this application do not substitute for scientific diagnosis, medical assessment, or clinical evaluation.

The use of outputs obtained by corporate users as grounds for:

  • Termination of employment contract,
  • Salary deduction,
  • Performance penalty,
  • Disciplinary action

or similar proceedings arising from labour law or employment contracts is legally and contractually prohibited.

In this regard, all legal, administrative, and criminal liability arising from the use of data provided through the application for purposes other than intended belongs exclusively to the corporate user.

8. Transfer of Data to Service Providers and Company Affiliates

Your personal data may be shared with:

  • Company affiliates operating within the scope of providing application services,
  • Business partners, and
  • Service suppliers

for the purposes of providing the application's technical and commercial infrastructure, operating the system, improving user experience, and providing access to the application, based on the legal ground of KVKK Article 5/2-f (legitimate interest of the data controller) and limited to the stated purposes only.

9. Data Retention Period

Your data will be retained for the duration required by the processing purpose, after which it will be deleted, destroyed, or anonymised. This period is determined in accordance with legal obligations and internal policies.

Personal data is retained for the duration required by the processing purpose and limited to the periods prescribed in the relevant legislation. Upon expiration of these periods, data is deleted, destroyed, or anonymised ex officio or upon the request of the data subject.

10. Data Security

The Company takes appropriate technical and administrative measures to ensure the security of personal data and implements the necessary protective measures to prevent unauthorised access, disclosure, and loss of data.

The Company (Soltudo Teknoloji Anonim Sirketi) takes all necessary technical and administrative measures to prevent the unlawful processing and access of personal data and to ensure the preservation of data. The security of user passwords is exclusively the responsibility of the user.

11. User Rights

Users have the following rights under Article 11 of KVKK and GDPR:

  • Learning whether their data is being processed,
  • Requesting information if processed,
  • Learning the purpose of processing and whether it is being used in accordance with its purpose,
  • Learning the third parties to whom data has been transferred,
  • Requesting correction of incorrect or incomplete data,
  • Requesting deletion or destruction of data when the reason requiring processing ceases to exist,
  • Objecting to analyses made by automated systems,
  • Requesting compensation for damages caused by unlawful data processing,
  • Data portability to a different service provider under GDPR,
  • Withdrawing explicit consent at any time

Related requests can be made through the application owner company's [email address] and will be concluded free of charge within 30 business days.

12. Application to the Data Controller

You may submit your requests regarding your rights under Article 11 of the Law No. 6698 on the Protection of Personal Data, in accordance with the provisions of the "Communique on the Application Procedures and Principles to the Data Controller":

  • In writing, by submitting a signed petition to our Company's physical address, or
  • By sending it from your email address, which has been verified for your membership, to our Company's official email address

you may submit your application.

Your applications will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request. However, if the process requires additional cost, the fee determined by the Personal Data Protection Board's tariff may be charged.

13. Personal Data Retention Period

Personal data is retained for the duration required by the processing purpose and limited to the periods prescribed in the relevant legislation. Upon expiration of these periods, data is deleted, destroyed, or anonymised ex officio or upon the request of the data subject.

14. Data Security Measures

The Company (Soltudo Teknoloji Anonim Sirketi) takes all necessary technical and administrative measures to prevent the unlawful processing and access of personal data and to ensure the preservation of data. The security of user passwords is exclusively the responsibility of the user.

15. Application Procedure

The data subject may submit their requests regarding their rights under KVKK in writing or through methods determined by the Company. Applications are evaluated and concluded within 30 (thirty) business days at the latest.