SİBERLOCK - Cyber Security and Consultancy Services

1. Data Controller

Within the scope of the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by SİBERLOCK Cyber Security and Consultancy Services ("Company") as the data controller for the purposes and legal reasons explained below.

Malazgirt District, Sarayburnu St. No:46, Apt:103, 42060 Selcuklu/Konya

[email protected]

+90 (332) 606 24 01

2. Processed Personal Data

Your following personal data is processed via our website:

📋 Identity Information

Name, surname, title, company name

📧 Contact Information

E-mail address, phone number

💻 Technical Data

IP address, browser information, cookie data, device fingerprint (FingerprintJS for security purposes)

🔒 Security Analysis Data

Screenshots, descriptions and cyber incident information sent via the "Under Attack" form

🛡️ Security Verification Data

Cloudflare Turnstile captcha solution data (for bot protection)

📊 Usage Data

Page views, quote request form information, service preferences

🤖 AI Assistant (ALISA) Chat History

Your chat history with our AI assistant (ALISA) is processed and matched with a visitor ID to provide support and detect malicious usage.

🔍 Free File Analysis Tool data

Under our free File Analysis Tool: content of the file you upload or digests derived from it, file name and type, size, MIME/technical metadata; multi-engine antivirus results and risk scoring; one-time access tokens for report download; where offered, data related to extended threat intelligence; and IP, session/rate limit and security logs to secure the service and prevent abuse. If your file contains special categories of personal data, Article 6 of the KVKK may apply; you must not upload such data knowingly.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

•Receiving and responding to communication requests
•Providing cyber security consultancy and services
•AI-assisted evaluation of "Under Attack" form applications
•Processing quote requests and providing services
•Ensuring website security (bot protection, abuse prevention)
•Analyzing website performance and improving user experience
•Fulfilling legal obligations (log keeping per Law No. 5651)
•Increasing service quality and ensuring customer satisfaction
•Providing instant cybersecurity support via the AI assistant (ALISA)
•Detecting and preventing malicious behavior by analyzing ALISA chat history and IP/Visitor pairs
•Malware/suspicious file detection, reporting, and abuse and quota control via the free File Analysis Tool, and information security triage
•Providing extended threat intelligence and relationship analysis when you request it (within technical and service policy limits)

4. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:

✓Explicit consent: For marketing and analytical cookies
✓Explicit consent (file analysis): When you upload a file to the free File Analysis Tool and tick the explicit consent box, to perform scanning and the analysis service
✓Performance of contract: To provide the services you requested
✓Legitimate interest: To ensure website security and service quality
✓Legal obligation: To comply with legal regulations

5. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to the purposes stated above:

🔹Google LLC: Analytics and advertising services (Google Analytics, Google Ads) - USA

🔹Cloudflare Inc: Bot protection and security verification services (Turnstile) - USA

🔹FingerprintJS Inc: Device fingerprint and security services - USA

🔹Hosting providers: Website infrastructure and database services

🔹Authorized public institutions: In case of legal obligation (courts, BTK, etc.)

🔹Google LLC (Gemini AI): AI assistant infrastructure and data processing - USA

🔹Multi-engine security scanning service providers: For malware scanning, reporting and (when enabled) extended threat intelligence, foreign-hosted cyber threat intelligence and scanning infrastructure partners (e.g. USA, EU and other countries); transfers are limited to scanning and reporting purposes

⚠️ In case of data transfer abroad, necessary guarantees are provided within the scope of Article 9 of the KVKK. The adequacy of the protection level of the countries to which data is transferred is evaluated and necessary measures are taken.

6. Retention Periods of Personal Data

Your personal data is retained for the period required by the processing purpose and within the scope of legal retention periods:

Data Category	Retention Period
Contact and quote form data	2 years
Under Attack report data	1 year after completion
Cookie data	1 year (analytics cookies 2 years)
Device fingerprint (visitorId)	1 year
Log records (Law No. 5651)	2 years (legal requirement)
User account information	Until account is deleted
ALISA Chat Logs	1 year (Indefinitely for banned users/violators)
File Analysis Tool records (file, digest/report metadata, security logs)	Uploaded file on server: until deleted after analysis completes; database scan/report records: generally up to 2 years, subject to cessation of purpose or legal periods; longer retention may apply where required by law

7. Your Rights Under KVKK

Pursuant to Article 11 of the KVKK, you have the following rights:

a)To learn whether your personal data is processed
b)To request information if your personal data has been processed
c)To learn the purpose of processing personal data and whether they are used in accordance with their purpose
d)To know the third parties to whom personal data is transferred domestically or abroad
e)To request correction of personal data if it is incomplete or incorrectly processed
f)To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK
g)To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
h)To request compensation for damages in case you suffer damage due to unlawful processing of your personal data

8. Application Method

You can apply by one of the following methods to exercise your rights stated above:

E-mail: [email protected]

Address: Malazgirt District, Sarayburnu St. No:46, Selcuklu/KONYA (written application)

Your applications will be concluded free of charge within 30 (thirty) days at the latest. If the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

1. Data Controller

Malazgirt District, Sarayburnu St. No:46, Apt:103, 42060 Selcuklu/Konya

[email protected]

+90 (332) 606 24 01

2. Processed Personal Data

Your following personal data is processed via our website:

📋 Identity Information

Name, surname, title, company name

📧 Contact Information

E-mail address, phone number

💻 Technical Data

IP address, browser information, cookie data, device fingerprint (FingerprintJS for security purposes)

🔒 Security Analysis Data

Screenshots, descriptions and cyber incident information sent via the "Under Attack" form

🛡️ Security Verification Data

Cloudflare Turnstile captcha solution data (for bot protection)

📊 Usage Data

Page views, quote request form information, service preferences

🤖 AI Assistant (ALISA) Chat History

Your chat history with our AI assistant (ALISA) is processed and matched with a visitor ID to provide support and detect malicious usage.

🔍 Free File Analysis Tool data

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

•Receiving and responding to communication requests
•Providing cyber security consultancy and services
•AI-assisted evaluation of "Under Attack" form applications
•Processing quote requests and providing services
•Ensuring website security (bot protection, abuse prevention)
•Analyzing website performance and improving user experience
•Fulfilling legal obligations (log keeping per Law No. 5651)
•Increasing service quality and ensuring customer satisfaction
•Providing instant cybersecurity support via the AI assistant (ALISA)
•Detecting and preventing malicious behavior by analyzing ALISA chat history and IP/Visitor pairs
•Malware/suspicious file detection, reporting, and abuse and quota control via the free File Analysis Tool, and information security triage
•Providing extended threat intelligence and relationship analysis when you request it (within technical and service policy limits)

4. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:

✓Explicit consent: For marketing and analytical cookies
✓Explicit consent (file analysis): When you upload a file to the free File Analysis Tool and tick the explicit consent box, to perform scanning and the analysis service
✓Performance of contract: To provide the services you requested
✓Legitimate interest: To ensure website security and service quality
✓Legal obligation: To comply with legal regulations

5. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to the purposes stated above:

🔹Google LLC: Analytics and advertising services (Google Analytics, Google Ads) - USA

🔹Cloudflare Inc: Bot protection and security verification services (Turnstile) - USA

🔹FingerprintJS Inc: Device fingerprint and security services - USA

🔹Hosting providers: Website infrastructure and database services

🔹Authorized public institutions: In case of legal obligation (courts, BTK, etc.)

🔹Google LLC (Gemini AI): AI assistant infrastructure and data processing - USA

6. Retention Periods of Personal Data

Your personal data is retained for the period required by the processing purpose and within the scope of legal retention periods:

Data Category	Retention Period
Contact and quote form data	2 years
Under Attack report data	1 year after completion
Cookie data	1 year (analytics cookies 2 years)
Device fingerprint (visitorId)	1 year
Log records (Law No. 5651)	2 years (legal requirement)
User account information	Until account is deleted
ALISA Chat Logs	1 year (Indefinitely for banned users/violators)
File Analysis Tool records (file, digest/report metadata, security logs)	Uploaded file on server: until deleted after analysis completes; database scan/report records: generally up to 2 years, subject to cessation of purpose or legal periods; longer retention may apply where required by law

7. Your Rights Under KVKK

Pursuant to Article 11 of the KVKK, you have the following rights:

a)To learn whether your personal data is processed
b)To request information if your personal data has been processed
c)To learn the purpose of processing personal data and whether they are used in accordance with their purpose
d)To know the third parties to whom personal data is transferred domestically or abroad
e)To request correction of personal data if it is incomplete or incorrectly processed
f)To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK
g)To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
h)To request compensation for damages in case you suffer damage due to unlawful processing of your personal data

8. Application Method

You can apply by one of the following methods to exercise your rights stated above:

E-mail: [email protected]

Address: Malazgirt District, Sarayburnu St. No:46, Selcuklu/KONYA (written application)

KVKK Clarification Text

1. Data Controller

2. Processed Personal Data

📋 Identity Information

📧 Contact Information

💻 Technical Data

🔒 Security Analysis Data

🛡️ Security Verification Data

📊 Usage Data

🤖 AI Assistant (ALISA) Chat History

🔍 Free File Analysis Tool data

3. Purposes of Processing Personal Data

4. Legal Grounds for Processing Personal Data

5. Transfer of Personal Data

6. Retention Periods of Personal Data

7. Your Rights Under KVKK

8. Application Method

KVKK Clarification Text

1. Data Controller

2. Processed Personal Data

📋 Identity Information

📧 Contact Information

💻 Technical Data

🔒 Security Analysis Data

🛡️ Security Verification Data

📊 Usage Data

🤖 AI Assistant (ALISA) Chat History

🔍 Free File Analysis Tool data

3. Purposes of Processing Personal Data

4. Legal Grounds for Processing Personal Data

5. Transfer of Personal Data

6. Retention Periods of Personal Data

7. Your Rights Under KVKK

8. Application Method