Personal data protection notice
Last updated: October 14, 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to people using the website and free analysis tools at https://exextramer.com.
Who is the data controller?
The data controller is [unvan] (“Company”), address [adres], tax office/number [vergi_dairesi] / [vergi_no], MERSIS [mersis], registered e-mail (KEP) [kep], e-mail [eposta].
Which personal data do we process?
| Category | Example | When |
|---|---|---|
| Identity | Name | Contact and quote forms |
| Contact | E-mail, phone | Forms, report unlock, subscriptions |
| Customer transaction | Request content, package, budget, analysed URL and report | Forms, analysis tools |
| Security | One-way salted hash of your IP (raw IPs are not stored), browser info, random visitor cookie | All visits |
| Marketing | Commercial message consent and its time | Only if you consent |
Why do we process it?
To answer your quote and contact requests, generate and e-mail the report you request, prevent abuse of the free tools, keep our services secure, meet legal obligations and, with your consent, send news and offers.
Legal bases
Contract formation (KVKK 5/2-c), legitimate interest (5/2-f), legal obligation (5/2-ç) and your explicit consent (5/1) for commercial messages. You can withdraw consent at any time.
Transfers
Data is shared only as needed with hosting and e-mail providers, the bot-protection provider (Cloudflare Turnstile, if enabled) and authorities when legally required. Servers may be located abroad; transfers follow KVKK Article 9. AI-generated report summaries receive technical findings only, never your name, e-mail or phone.
Retention
Analysis records up to 180 days; quote and contact requests up to 2 years; daily quota records (IP hash) 3 days; assistant chats 90 days. Expired data is deleted or anonymised automatically.
Your rights
Under KVKK Article 11 you may ask whether your data is processed, request information, learn the purpose and recipients, request correction or deletion, object to purely automated decisions and claim damages. Send requests to [eposta]; we reply free of charge within 30 days.