KVKK Notice (Türkiye)

1. Identity of the data controller

For this website the data controller is the company whose identity and contact details are set out below.

2. Personal data processed

Identity data: first and last name.

Contact data: email address and organisation name where given.

Transaction data: the team size you select and the content of the message you write in the demo request form.

Security data: short-lived technical records kept to prevent abuse of the form.

Pleading citation check: the text of the document you upload (with detected personal data masked), its file name, your IP address and the email address you give for the report. The original file is not retained in application storage. The document may contain personal data the masking misses, including special category data.

Apart from the citation check, no special category personal data is collected through this site. Measurement is cookieless and does not identify an individual.

3. Purposes of processing

To respond to and evaluate your demo request.

To conduct pre-contractual discussions and commercial communication.

To measure and improve how the website works.

To perform the citation check you request and email its report.

To prevent abuse of the form infrastructure and the free check.

4. Method of collection and legal ground

Your personal data is collected electronically and by automated means through the demo request form and the emails you send us.

Citation-check data is collected electronically when you upload a document and start the check, and is processed under Article 5/2(c) to provide the service you request and under Article 5/2(f) to prevent abuse.

Demo request data is processed under Article 5/2(c) of the Law, on the ground that it is directly related to the formation of a contract.

Measurement and security data is processed under Article 5/2(f), on the ground of the controller’s legitimate interest, provided it does not harm your fundamental rights and freedoms.

5. Transfer of personal data

Your personal data is transferred to these suppliers, only to the extent needed to provide the service: Vercel Inc. (hosting for this site and cookieless measurement, Frankfurt region), Slack Technologies (delivery of demo requests to our team, United States), Resend (email delivery, United States).

On the product side the suppliers are Hetzner Online GmbH (application and database servers, Germany), Cloudflare, Inc. (object storage, bucket in the European Union jurisdiction) Fireworks AI, Inc. (model inference and reranking for the AI features, United States) and TypeSafe AI, Inc. (classifying the outcome of public court decisions, with no customer content sent, United States).

In the citation check, the masked text is transferred to Fireworks AI, Inc. (United States) to assess the citations, and the report email to Resend (United States).

These are transfers abroad, resting on the data processing agreements between us and each provider.

For a law firm uploading client data to the product, we sign the controller-to-processor standard contract with your firm under Article 9 of the Law. The text is fixed by the Board and cannot be varied, and a signed copy is provided on request. Notifying the Authority within five business days of signature is the transferring party’s obligation unless the contract assigns it otherwise.

Transfers to public authorities legally entitled to receive them are reserved.

6. Retention

Demo request data is kept until the conversation concludes, and no longer than twenty-four months.

Email correspondence is kept for as long as the relationship it concerns continues.

Citation-check records are deleted once 24 hours have passed; an irreversible digest of the email address is kept indefinitely for the one-free-check rule.

When the period ends, data is deleted, destroyed, or anonymised.

7. Our role for data inside the product

This notice covers this website only.

For client data uploaded to the Frontier Legal product by a law firm, that firm is the data controller. We process it as a data processor, only on the firm’s instructions and under the data processing agreement between us. The distinction matters for professional confidentiality.

8. Rights of the data subject

Under Article 11 of the Law you have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose of processing and whether the data is used accordingly, and to know the third parties to whom it is transferred at home or abroad.

You also have the right to request correction of incomplete or incorrect data, to request erasure or destruction under the conditions in Article 7, and to request that these actions be notified to the third parties the data was transferred to.

In addition, you have the right to object to a result reached against you through analysis by automated systems alone, and to claim compensation if you suffer loss because your data was processed unlawfully.

9. How to apply

Send requests concerning your rights to lagel.reitnorf@ofni. Your request will be concluded as soon as possible and within thirty days at the latest.

If your application is refused or you find the response insufficient, you may complain to the Personal Data Protection Board within thirty days of learning the response, and in any case within sixty days of the application date.