Privacy notice
Privacy Notice (KVKK)
Last updated: —
Data controller
Under Law No. 6698 on the Protection of Personal Data, the controller is — (legal name, address, MERSIS).
Personal data processed
Name, organisation, role, e-mail, phone; account records and session data; request-form contents; support correspondence. Payment data is not processed — no collection takes place through the platform.
Purposes
Providing and maintaining the service; evaluating requests and quotations; providing support; meeting legal obligations; ensuring system security and keeping an audit trail.
Legal basis
Art. 5/2-(c) performance of a contract, 5/2-(ç) legal obligation, 5/2-(f) legitimate interest; explicit consent where none applies.
Transfers
Shared with hosting and infrastructure providers and competent public authorities, limited to the stated purposes. Any transfer abroad complies with Art. 9.
Retention
Retained for statutory limitation and retention periods; absent such a period, for as long as the purpose requires, then erased, destroyed or anonymised.
Your rights
Under Art. 11 you may learn whether your data is processed, request information, learn whether it is used for its purpose, request rectification or erasure, learn the third parties it was transferred to, object to adverse outcomes of automated analysis, and claim compensation. Applications may be sent to —.
Policy
Privacy Policy
Last updated: —
Scope
This policy explains how information collected through the Carbonix website and application is used.
Tenant data belongs to you
The installation, production, factor and emission data you enter belongs to you. It is processed solely to deliver the service; never used for marketing or sold.
Tenant isolation
Each tenant's data is separated with row-level security; one tenant's query cannot reach another's records.
Audit trail
Writes are logged with who, when and what changed. This exists for regulatory traceability and cannot be deleted.
Security
Encryption in transit, authorised access, least-privilege and regular backups. No system can promise absolute security; breaches are notified under Art. 12/5.
Portability and termination
On termination your data remains available for export for a reasonable period, then is deleted.
Policy
Cookie Policy
Last updated: —
Cookies used
Only strictly necessary cookies are used: session management, security and language preference. No advertising, tracking or profiling cookies.
| Cookie |
Purpose |
Duration |
| session | Maintaining the session | Session |
| csrf | Form security | Session |
| lang | Language preference | 12 months |
| cookie_ack | Remembering the notice was dismissed | 12 months |
Managing cookies
Strictly necessary cookies cannot be disabled; blocking all cookies will break sign-in and language preference.
Agreement
Terms of Use
Last updated: —
Nature of the service
Carbonix is a regulation-based calculation and reporting tool. It is not a legal, financial or advisory service and does not substitute for a verifier.
Data accuracy
The user is responsible for the accuracy and currency of data entered. Faulty input yields faulty output.
Declaration responsibility
The operator is solely responsible for the content, timeliness and compliance of declarations submitted to authorities.
Usage limits
Reverse engineering, unauthorised access, automated bulk querying and resale are prohibited.
Continuity and liability
Planned maintenance is announced in advance. Liability for indirect damages is limited to the extent permitted by law.
Governing law
Governed by the laws of the Republic of Türkiye; the courts of — have jurisdiction.
Agreement annex
Data Processing Agreement
Last updated: —
Roles
The tenant acts as controller, Carbonix as processor. Processing occurs solely on the tenant's documented instructions.
Sub-processors
Hosting and infrastructure providers may act as sub-processors; changes are notified in advance and the tenant may object.
Confidentiality and security
Personnel are bound by confidentiality; technical and organisational measures are applied under Art. 12.
Breach notification
On a breach the processor informs the controller without undue delay and supports the investigation.
Return and deletion
On termination data is returned or destroyed, save where retention is legally required.
Carbonix