KVKK notice

Under KVKK, the data controller for personal data processed through uhm.co is Halit Software Inc., a corporation incorporated in British Columbia, Canada. Contact details are on the legal requests page.

Identity and contact data (email address), transaction and usage data (links created, click analytics), and, indirectly, visitor IP addresses. IP addresses are hashed with a daily-rotating salt and never stored in raw form; the privacy policy sets out the technical detail.

Providing the redirect and analytics service, preventing abuse of the platform, billing, and meeting our own legal obligations, including responding to a lawful request from an authority.

Processing is based on performance of the contract with the data subject (KVKK Art. 5/2-c), the legitimate interest in operating and securing the service (Art. 5/2-f), and, where applicable, a legal obligation to which the controller is subject (Art. 5/2-ç).

Personal data processed through uhm.co is stored and processed in the EU (Frankfurt, eu-central-1), and several other service providers described in the privacy policy are likewise located outside Turkey. Turkey does not currently have an adequacy decision covering transfers to the EU, so this transfer relies instead on appropriate safeguards or explicit consent. Which basis applies is still being finalized with legal counsel, and this section will be updated once that review is complete. This is stated here deliberately rather than glossed over.

A data subject may ask whether personal data is being processed, request information about that processing, learn its purpose and whether the data is used accordingly, learn the third parties in Turkey or abroad to whom it has been transferred, request correction of incomplete or inaccurate data, request its deletion or destruction, and object to an adverse result arising solely from automated analysis of that data.

Send the request through the contact details on the legal requests page. A response follows within the timeframe KVKK requires from the date the request is received.