Türkçe · KVKK Aydınlatma Metni

Welcome to our Privacy Notice. This document outlines how we collect, use, store, and protect your information on our website, located at https://scimatic.org. SciMatic is a ZincirX product: "we", "us" and "our" mean ZincirX Bilişim Teknoloji ve Danışmanlık A.Ş. and ZincirX Inc., and the next section explains which of them is responsible for your data.

Who is responsible for your data

SciMatic is provided by two companies: ZincirX Bilişim Teknoloji ve Danışmanlık A.Ş. ("ZincirX A.Ş."), a joint-stock company established in Türkiye, Gülbahçe Mah. Gülbahçe Cad. İYTE Sitesi No: 1/40 İç Kapı No: 51, 35430 Urla/İzmir, Türkiye (MERSİS 0999144137300001; Urla Vergi Dairesi 9991441373); and ZincirX Inc., a corporation incorporated in Delaware, United States, with its registered office at c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

The company responsible for your data, the controller (in Turkish law, the veri sorumlusu), depends on how you deal with us:

• If you buy on SciMatic with Türkiye as your billing country (for an institution, the institution's country), ZincirX A.Ş. is the controller of your account and purchase data, because it is the company that sells to you and issues your invoice.
• If you buy with any other billing country, ZincirX Inc. is the controller of your account and purchase data, for the same reason. ZincirX A.Ş. operates SciMatic for both companies and processes that data on ZincirX Inc.'s behalf, only on its instructions, under a data processing agreement between the two companies.
• In every other case (if you visit our website or apps, have an account without having bought anything, or write to us), the controller is ZincirX A.Ş., which runs the website and the apps.

The two companies are separate controllers, not joint controllers: each is responsible for the data it controls.

For users in Türkiye, the controller named above is the veri sorumlusu under Law No. 6698 on the Protection of Personal Data (KVKK). You can use your rights under Article 11 of the KVKK, and under the EU General Data Protection Regulation (GDPR) where it applies, by writing to info@scimatic.org.

If you are in Türkiye, our Turkish notice under Law No. 6698 (KVKK Aydınlatma Metni), at https://scimatic.org/kvkk, explains how ZincirX Bilişim Teknoloji ve Danışmanlık A.Ş. processes your personal data and how to exercise your rights.

How we handle your information

1. Information Collection: We only collect personally identifiable information that you voluntarily provide to us through email or other direct contact. We are the sole owners of this information and will not sell or rent it to anyone.
2. Use of Your Data: We use your information to respond to your inquiries and will not share it with third parties outside of our organization, except as necessary to fulfill your requests.
3. Your Control Over Information: You can opt out of future contacts, review and correct your data, or request its deletion by contacting us through the provided contact details.

Google User Data

Our application integrates with Google APIs to provide certain features. This section describes how we handle Google user data in compliance with the Google API Services User Data Policy.

1. Data Accessed: Our application may access the following types of Google user data:
   • Basic profile information (name, email address)
   • Email messages and metadata (when Gmail API scopes are authorized)
   • Calendar events and scheduling data (when Calendar API scopes are authorized)
2. Data Usage: Google user data is used solely to provide and improve the services you have explicitly authorized. Specifically:
   • Profile information is used for authentication and account identification.
   • Email and calendar data is accessed only to deliver the features you have requested within our application.
   • We do not use Google user data for advertising, marketing, or any purpose unrelated to the core functionality of our application.
   • We do not use Google user data to train artificial intelligence or machine learning models.
3. Data Storage: Google user data is stored securely on our servers using industry-standard encryption. Data is retained only for as long as necessary to provide the services you have authorized. You may request deletion of your data at any time by contacting us.
4. Data Sharing: We do not sell, trade, or share Google user data with third parties, except:
   • When required by law or legal process.
   • With your explicit consent.
   • With service providers who assist in operating our application, under strict confidentiality agreements.

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

When you buy something on SciMatic, who receives your payment details depends on the billing country you choose at checkout (see our Terms of Sale):

• Billing country Türkiye: your name, e-mail address, billing country, the invoice details you give (address; for an institution its name, tax number and tax office) and what you buy go to ZincirX Bilişim Teknoloji ve Danışmanlık A.Ş. (Gülbahçe Mah. Gülbahçe Cad. İYTE Sitesi No: 1/40 İç Kapı No: 51, 35430 Urla/İzmir, Türkiye), the seller, which issues your e-Arşiv invoice, and to iyzico (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş.), the payment institution that takes your card payment on zincirx.com.
• Every other billing country: your e-mail address, what you buy and the details you enter on the payment page go to ZincirX Inc., a Delaware corporation, the seller, and to Stripe, which takes your card payment.

You enter your card number on the payment provider's page; SciMatic never sees or stores it. We keep a record of each purchase (amount, date, billing country, payment reference) for our accounts.

Security: We take precautions to protect your information both online and offline. Sensitive data is encrypted and transmitted securely. Only employees who require the information for specific tasks are granted access, and our servers are kept in a secure environment.

If you have any concerns about our privacy practices, please contact us immediately via telephone at +90 533 549 9880 or via email at Admin.

By post, write to ZincirX A.Ş., Gülbahçe Mah. Gülbahçe Cad. İYTE Sitesi No: 1/40 İç Kapı No: 51, 35430 Urla/İzmir, Türkiye, or to ZincirX Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Registration

To use this website, complete the registration form. While some information is required, providing additional demographic details is optional.

Cookies

SciMatic uses the cookies and browser storage below. The ones that are not strictly necessary run only if you accept their purpose (analytics or advertising) in the site's cookie banner; until you do, no request is sent to Google or Yandex.

• Session cookie and XSRF-TOKEN (strictly necessary): carry your session and language and protect forms against cross-site request forgery; they expire with the session.
• Remember-me cookie (strictly necessary; only if you tick "Remember me" when signing in): keeps you signed in on that browser until you sign out.
• Your cookie choice (strictly necessary; zx_consent in the browser's local storage): your accept or reject for each purpose and its date; you are asked again after 6 months.
• Google Analytics 4 and Google Tag Manager (analytics; Google LLC, USA; only with your consent): the _ga and _ga_<ID> cookies, kept for up to 2 years. They measure the pages you visit (with secret parts of the address removed), when, your browser and device and an approximate location derived from your IP address, plus the sign-up, checkout and purchase steps (amount, currency and order number).
• Yandex Metrica (analytics; Yandex LLC, Russian Federation; only with your consent, and only on the pages that use it): cookies starting with _ym, such as _ym_uid and _ym_d (1 year), _ym_isad (2 days) and _ym_visorc (30 minutes); it measures visits, clicks and link clicks. Session recording (Webvisor) is off.
• Google AdSense (advertising; Google LLC, USA; only with your consent): shows and measures ads; the __gads, __gpi and __eoi cookies are kept for up to 13 months, and Google may also use ad cookies on its own domains.

You can change your choice or withdraw consent at any time from the "Cookie settings" link at the bottom of the page; withdrawing stops these tools and deletes the _ga, _ym and ad cookies the site can delete.

This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such sites.