1. Data controller
The data controller is ArvoCulture Group Teknoloji Sanayi ve Ticaret Limited Şirketi (“ArvoOS”). Address: Yakuplu Mah. Hürriyet Bulvarı Skyport Residence No:1 D:113, 34524 Beylikdüzü / İstanbul, Türkiye. Email: info@arvo-os.com.
2. Personal data we process
When you submit the demo / contact form:
- Identity and contact: full name, email address, phone number, organization name (organization and phone are optional).
- Request details: the product or service you are interested in, your message, and the page and language the form was sent from.
- Acknowledgement record: your confirmation that you have read this notice.
- Security: a daily-changing, one-way hashed digest of your IP address, used to prevent abuse. The raw IP address is not stored.
3. Purposes
- Receiving and assessing your demo, access, information and project requests, and responding to you
- Starting proposal and contract processes where you ask for them
- Protecting the form against automated and malicious submissions, and keeping information secure
- Meeting legal obligations
4. Legal bases
Your personal data is processed on the following legal bases under Article 5(2) of the KVKK:
- (c) Processing is directly related to the establishment or performance of a contract — responding to your request and preparing demos and proposals
- (f) Legitimate interest of the data controller, provided it does not harm your fundamental rights and freedoms — form security and request management
- (ç) Compliance with a legal obligation of the data controller
5. How data is collected
Data is collected electronically from you through the website form and automatically from your browser when the form is submitted. Your request is recorded as a customer request in our own ArvoOS panel.
6. Transfers
Your personal data is not sold and is not shared with third parties for marketing.
Data is stored on the servers of the cloud infrastructure and database providers that host the website and panel; these servers may be located outside Türkiye. Such transfers are carried out in line with Article 9 of the KVKK. Data may be disclosed to authorized public bodies only where the law requires it.
7. Retention
Form data is kept for as long as needed to assess your request and carry out any resulting business relationship, and for the periods required by applicable law; it is then deleted, destroyed or anonymized. Security IP digests are deleted automatically within a few days.
8. Cookies
This website does not use cookies or tracking tools for advertising, analytics or profiling. Only technical cookies that may be necessary for the site to run securely, and one preference cookie that remembers the language you chose (arvo_site_dil, one year), are used.
9. Your rights under Article 11 of the KVKK
By applying to the data controller, you may:
- Learn whether your personal data is processed and, if so, request information about it
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties in Türkiye or abroad to whom data is transferred
- Ask for incomplete or inaccurate data to be corrected
- Ask for data to be deleted or destroyed under the conditions of Article 7 of the KVKK
- Ask for corrections, deletions and destructions to be notified to third parties the data was transferred to
- Object to an adverse outcome arising solely from automated analysis
- Claim compensation for damage caused by unlawful processing
10. How to apply
Send your requests by email to info@arvo-os.com or in writing to Yakuplu Mah. Hürriyet Bulvarı Skyport Residence No:1 D:113, 34524 Beylikdüzü / İstanbul, Türkiye. Requests are concluded free of charge within thirty days at the latest, depending on their nature (Article 13 of the KVKK).
11. Visitors in the European Economic Area and the United Kingdom (GDPR)
If you are in the EEA or the UK and we offer our services to you, your personal data is also processed under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK GDPR. The controller is ArvoOS, as set out in section 1.
Legal bases (Art. 6(1) GDPR): steps prior to entering into a contract — answering your request and preparing demos and proposals (b); legitimate interests — form security and request management (f); compliance with legal obligations (c).
Your data may be processed in Türkiye and on hosting providers’ servers outside the EEA. You can write to us for information about the safeguards relied on for these transfers. Send requests through the channels in section 10; requests under the GDPR are answered within one month.
Under the GDPR you can:
- Access your data and receive a copy (Art. 15)
- Have inaccurate data rectified (Art. 16) and data erased (Art. 17)
- Restrict processing (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Lodge a complaint with the data protection supervisory authority of the EEA country where you live or work or, in the UK, with the Information Commissioner’s Office (ICO)
12. Changes
This notice may be updated when needed; the current version is always published on this page.