DMCDMC Bilgi Teknolojileri

KVKK Disclosure Notice

Disclosure notice on the processing of your personal data under Turkish Law No. 6698 on the Protection of Personal Data.

Last updated: April 2026

Kapsam notu: Bu metin, SentinelDB360 Platform (SaaS / bulut izleme) hizmeti içindir. SentinelDB360 Security yerel araçtır; tüm işleme müşterinin kendi makinesinde olur, DMC veriye erişmez.

1. Data Controller

This information notice is provided by DMC Bilgi Teknolojileri as the data controller, in compliance with the Personal Data Protection Law No. 6698 (KVKK).

Tam UnvanDMC BİLGİ TEKNOLOJİLERİ YAZILIM DANIŞMANLIK SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Kısa AdDMC Bilgi Teknolojileri
AdresDüzce Üniversitesi Teknoloji Geliştirme Bölgesi (Düzce TGB)
KVKK Application[email protected]

2. Categories of Personal Data Processed

DMC processes personal data in the following categories:

CategoryDataSource
Identity Name, surname, title Demo/contact form, email
Contact Email address, phone number, company name Demo/contact form, email
Customer Transaction License information, subscription details, billing address Product registration, sales process
Usage Platform login times, features used, session information Automatically (SentinelDB360 SaaS)
Technical IP address, browser type, operating system Automatically (website)

Important: SentinelDB360 platform telemetry data does NOT include personal data. Database performance metrics, query plans, and system logs are anonymous technical data.

3. Purposes and Legal Basis for Processing Personal Data

PurposeLegal Basis (KVKK Art. 5)
Responding to demo and quote requests Directly related to conclusion or performance of a contract (Art. 5/2-c)
License and subscription management Performance of contract (Art. 5/2-c)
Technical support and customer service Performance of contract; legitimate interest (Art. 5/2-c, 5/2-f)
Product updates and informational emails Explicit consent (Art. 5/1)
Platform security and verification Legitimate interest; legal obligation (Art. 5/2-ç, 5/2-f)
Fulfilling legal obligations (tax, accounting) Legal obligation (Art. 5/2-ç)
Website analytics and improvement Legitimate interest (Art. 5/2-f)

4. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups within the scope of KVKK Articles 8 and 9:

  • Service providers: Cloud infrastructure (Microsoft Azure — Türkiye/Europe), e-mail (Microsoft 365), monitoring (Cloudflare). Each is bound by KVKK-compliant DPA.
  • Legal obligations: Public authorities and courts when required by law.
  • Cross-border transfer: Limited to service providers that operate in jurisdictions with adequate protection, with explicit consent where required.

Your personal data is not shared with or sold to third parties for any purpose other than those stated above.

5. Retention Period of Personal Data

Your personal data is retained for the period required by the processing purpose and within the relevant legal retention obligations:

  • Demo/contact form data: 24 months from the date of submission.
  • Customer/license data: Throughout the contract term + 10 years (Tax Procedure Law).
  • Platform usage logs: 12 months (security/audit).
  • Marketing communication: Until consent is withdrawn.
  • Website cookies: Stored locally on your device; you may clear them at any time.

Data whose retention period has expired is securely deleted, destroyed, or anonymized.

6. Technical and Administrative Security Measures

DMC takes the following measures to ensure the security of your personal data:

🔒
TLS/SSL Encryption

All data transmission is encrypted with TLS 1.2+.

🛡️
Access Control

Role-based access (RBAC) and multi-factor authentication.

📋
Audit Log

All data access is logged and monitored.

🔑
Password Policy

bcrypt hashing, strong password requirements.

🏢
On-Premise Option

On the Enterprise plan, all data remains on your own servers.

🤝
Data Processing Agreements

KVKK-compliant DPAs are signed with all sub-processors.

7. Rights of the Data Subject (KVKK Article 11)

Pursuant to Article 11 of KVKK No. 6698, you have the following rights regarding your personal data:

a
Bilgi edinme

Learn whether your personal data is processed

b
Bilgi talep etme

Request information about it if processed

c
Purpose inquiry

Learn the purpose of processing and whether it is used in line with that purpose

ç
Transfer information

Learn the third parties to whom data is transferred domestically or abroad

d
Correction

Request correction of incomplete or inaccurate data

e
Silme / Yok etme

Request erasure when the conditions for processing no longer exist

f
Object

Object to outcomes drawn against you solely through automated analysis

g
Compensation

Demand compensation in case of damages caused by unlawful processing

How to Apply

You may submit applications regarding your rights via the following channels:

After your identity is verified, your applications are answered within 30 days at the latest, in writing or electronically.

8. Cookies Policy

The sentineldb360.com website uses the following types of cookies:

Cookie TypePurposeDuration
Strictly necessary (Session) User session, authentication (sd360_session) Until end of session
Preference Language selection (lang), theme preference 12 months
Analytics Page view statistics (anonymized) 12 months

You may disable cookies in your browser settings; however, some site features may not function properly.

9. Changes

This information notice may be updated in line with regulatory changes or service updates. Material changes are announced on the website and via e-mail to registered customers.

The latest version is always available at sentineldb360.com/kvkk.html.

10. Personal Data Protection Authority

If your application is not answered or the response is insufficient, you reserve the right to file a complaint with the Personal Data Protection Authority (KVKK).

KurumPersonal Data Protection Authority (KVKK)
Web Sitesiwww.kvkk.gov.tr
Back to Home