optiMdepoT
Loading
Legal

Privacy Policy and KVKK Notice

Last updated: October 2026

This is a courtesy translation of the Turkish original; in case of any discrepancy, the Turkish version prevails.

1. Introduction

This page contains the privacy policy for the personal data processed by optiMdepoT (the "Platform") and the information notice prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

2. Data Controller

The data controller for your personal data is the operator of the optiMdepoT platform. You can reach the data controller at depotoptim@gmail.com.

3. Personal Data We Process

Depending on how you use the Platform, the following data is processed:

  • Identity: full name
  • Contact: email address; the name, email address and message content you send through the contact form
  • Profile: the user type you declare at registration (student, academic, company employee, individual), organization/company, department, title, company size and purpose of use
  • Account security: the one-way encrypted (hashed) form of your password and your account approval status; nobody, including us, can read your password
  • Activity (usage log): the parameters of the calculations you run (numbers of aisles, blocks and locations, orientation), algorithm results and solution times, date and time, plan type and daily usage counter. Records from the Trial plan, which requires no membership, are not linked to an account
  • Operational security: your IP address and browser information in session records (for the duration of the session); your IP address in rate-limit counters (for a short time, measured in minutes)
  • Visit statistics: anonymous aggregate data such as the page visited, country, browser and device type

4. Purposes and Legal Grounds for Processing

Your personal data is processed for the following purposes and on the following legal grounds under Article 5/2 of KVKK. Your explicit consent is not required for these purposes:

  • Creating an account, managing it, providing the optimization service, showing your past results and managing daily usage limits — establishment or performance of a contract (Art. 5/2-c)
  • Sending service-related notification emails such as account approval and password reset — performance of a contract (Art. 5/2-c)
  • Replying to requests and questions that reach us through the contact form and email — legitimate interest of the data controller (Art. 5/2-f)
  • Ensuring information security, preventing abuse and keeping anonymous usage statistics to improve the service — legitimate interest of the data controller (Art. 5/2-f)
  • Fulfilling legal obligations and establishing, exercising or protecting a right — legal obligation and establishment of a right (Art. 5/2-ç and e)

5. Method of Collection

Your data is collected electronically, through the registration and contact forms where you declare it yourself and automatically while you use the Platform.

6. Transfer of Personal Data

Your personal data is not sold. It may be transferred to the following recipient groups so that the service can be provided:

  • Hosting provider: the Platform's servers are located in a data center in Europe. Your data is therefore hosted outside Türkiye
  • Email delivery provider: your email address and name are used to deliver account approval and password reset emails (Brevo — France)
  • When you write to us through the contact form or by email, your message may be stored abroad on the servers of our email provider (Google — Gmail)
  • Authorized public institutions and organizations where legally required

Transfers abroad are made in accordance with Article 9 of KVKK and the related legislation, under one of the safeguards provided by the legislation (an adequacy decision, standard contractual clauses or other appropriate safeguards).

7. Retention Periods

  • Your account information: for as long as your account is open; deleted or anonymized when you request closure or deletion of your account
  • Usage log: at most 1 year; automatically deleted after this period
  • Contact messages: at most 1 year after your request has been resolved
  • Session records: for the duration of the session (up to 120 minutes of inactivity)

Where legal retention obligations apply or where needed to protect a right, these periods may be extended by as long as the relevant legislation provides.

8. Cookies and Similar Technologies

The Platform uses only the cookies that are strictly necessary for the service to work; no advertising or marketing tracking cookies are used. No separate consent is requested for strictly necessary cookies:

  • optimdepot-session: session cookie. Keeps you logged in and maintains your session; it expires after at most 120 minutes of inactivity
  • XSRF-TOKEN: security cookie. Protects against cross-site request forgery (CSRF)
  • Browser local storage (oc_daily_usage_*): kept on your device to count your daily usage in the Trial plan, which requires no membership; it is not sent to the server

To understand how the site is used, we use a visit statistics tool that does not use cookies and runs on our own server. This tool does not identify you and does not store your IP address; it keeps only anonymous aggregate counts such as the page visited, country, browser and device type. If the "Do Not Track" setting is enabled in your browser, you are not included in the statistics.

9. Data Security

Reasonable technical and organizational measures are taken to protect your data: passwords are stored with one-way encryption, data is transmitted over an encrypted connection (HTTPS), only authorized persons can access the data, and rate limiting is applied against abuse.

10. Your Rights under KVKK

Under Article 11 of KVKK, you can apply to the data controller to:

  • Learn whether your personal data is processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether it is used in line with that purpose
  • Know the third parties to whom it is transferred, in Türkiye or abroad
  • Request correction if it is incomplete or inaccurate
  • Request deletion or destruction under Article 7 of KVKK
  • Request that corrections, deletions and destructions be notified to the third parties to whom the data was transferred
  • Object to a result against you arising from the analysis of the processed data exclusively through automated systems
  • Claim compensation if you suffer damage because the data was processed unlawfully

You can submit your applications by email to depotoptim@gmail.com, with information identifying you and stating your request clearly. Applications are answered free of charge within 30 days at the latest, depending on the nature of the request. If you are not satisfied with the response, your right to lodge a complaint with the Personal Data Protection Authority (kvkk.gov.tr) is reserved.

11. Changes

This notice may be updated from time to time. In the event of significant changes, you will be notified via your registered email address.