Privacy notice
Ytcontrol Elektromekanik Enerji İnşaat San. Tic. Ltd. Şti. (“YTControl” or “we”) develops YTCC, a web-based SCADA/HMI platform. This notice explains how we process your personal data when you visit this site, submit our forms, or correspond with us about a quote, a license or support. We prepared it under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
This notice informs you and asks for no approval. Processing that relies on your explicit consent has its own texts: the Commercial Electronic Message Consent and the Commercial Use Consent.
1. Data controller
YTControl is the data controller under the KVKK.
- Legal name: Ytcontrol Elektromekanik Enerji İnşaat San. Tic. Ltd. Şti.
- Address: Sanayi Mah. Teknopark Blv. Kapı No:1/4C/301 Pendik-İstanbul 34906, Türkiye
- Email: info@ytcontrol.com
2. Scope
This notice covers visitors to this site, people who fill in our forms, and contact persons at organizations we do business with.
This notice does not cover:
- YTCC on your own server: YTCC runs on your own server. User accounts, project files, alarm history and process data stay on your organization’s infrastructure. Your organization is the data controller for that data.
- Third-party sites: Other sites you open through links on this site have their own privacy notices.
3. Categories of data we process
| Category | Data |
|---|---|
| Identity | First and last name |
| Contact | Email address, your phone number if you give it |
| Professional | Company, role, industry, country |
| Requests and records | Subject, message, the package you choose, quote, license, invoice and support records |
| Transaction security | IP address, a hash of the IP and email address, browser and device details, request logs |
| Marketing | Your consents and their dates; with your consent, a cookie ID and the pages you visit |
We do not ask for special categories of personal data.
4. Why we process your data and on what legal basis
Contact form
- Data: First and last name, email address, subject, your message, the page language, the time you sent it, and the version of this notice you read.
- Purpose: To read and answer your message and to complete any quote or support request in it.
- Legal basis: Our legitimate interest in answering people who write to us (KVKK Art. 5/2-f). If your message concerns a quote or a contract, the processing relates directly to forming that contract (KVKK Art. 5/2-c).
- Retention: 2 years from our last correspondence.
In the subject and message fields, write only what your request needs. Do not include special categories of data, such as health, religion or political views, or information about other people.
Download form
You do not have to fill in this form. The “Skip the form and download” link below it lets you download without giving any information.
- Data: The package you choose, first and last name, email address, company, role, industry, country, your phone number if you give it, the page language, the time you sent it, and the version of this notice you read.
- Purpose: To give you the package, answer your questions about the download, and see which packages and industries draw interest so we can plan our product and support work.
- Legal basis: Giving you the package relates directly to forming and performing a contract (KVKK Art. 5/2-c). Seeing which packages and industries draw interest is our legitimate interest (KVKK Art. 5/2-f).
- Retention: 2 years from the time you sent it.
Quotes, licenses and support
- Data: Identity and contact details of your organization and its contact persons, invoice details, the organization and system details a license requires, correspondence and support records.
- Purpose: To prepare quotes, form and perform contracts, issue licenses, invoice and provide support.
- Legal basis: Forming and performing a contract (KVKK Art. 5/2-c), our legal obligations (KVKK Art. 5/2-ç) and our legitimate interest in running the business relationship with your organization (KVKK Art. 5/2-f).
- Retention: For the term of the contract and the statutory periods after it ends. We keep commercial books and documents for 10 years (Turkish Commercial Code No. 6102, Art. 82).
You can send license and support requests to info@ytcontrol.com.
Optional consents on the download form
The two consent checkboxes on the download form are optional. You can download without ticking them.
- Data: The information on the download form, the consent you gave, its date, and the version of the consent text.
- Purpose: To send you commercial messages by email, plan our marketing around your interests, and record your email consent in Türkiye’s Message Management System (İYS).
- Legal basis: Your explicit consent (KVKK Art. 5/1) and your consent to commercial electronic messages (Law No. 6563, Art. 6). Keeping the consent record is our legal obligation (KVKK Art. 5/2-ç).
- Retention: Each consent text states its own period. We keep consent records for 3 years after a consent ends.
Running and protecting the site
On the contact and download forms we use Cloudflare Turnstile to tell people from bots. Turnstile loads when you start using a form and processes your IP address and technical details of your browser and connection (Turnstile privacy addendum). We also ask Cloudflare’s DNS service whether the domain of the email address you enter can receive email. The query holds only the part after the @ sign.
- Data: IP address, browser and device details, the address requested, date and time; on the forms, the domain of your email address.
- Purpose: To deliver the site to you and to prevent attacks and misuse of the forms.
- Legal basis: Our legitimate interest in running the site and keeping it secure (KVKK Art. 5/2-f).
- Retention: We do not write IP addresses to form records. To limit misuse of the forms, we keep only a hash (SHA-256) of the IP and email address for at most 24 hours. For the records kept by Cloudflare, which hosts the site, see Cloudflare’s privacy policy.
Measuring site use
We load Google Analytics only if you allow it. If you do not, we do not measure your visit.
- Data: A cookie ID, the pages you visit, browser and device details, your IP address and the approximate location derived from it.
- Purpose: To measure which pages people use and improve the site accordingly.
- Legal basis: Your explicit consent (KVKK Art. 5/1). You can withdraw it through the “Cookie preferences” link at the bottom of the page.
- Retention: At most 14 months in Google Analytics. Cookie lifetimes are on the Cookie policy page.
The map on the Contact page
The Contact page shows our location with Google Maps. The map loads with the page. When you open it, your IP address and browser details go to Google, which processes them under its own privacy policy. If you prefer not to load the map, our address is in section 1 of this notice.
- Purpose: To show our location.
- Legal basis: Our legitimate interest in helping you find us (KVKK Art. 5/2-f).
5. How we collect your data
We collect your data by fully or partly automated means through the forms, cookies, server records and email correspondence.
If you leave required fields on the contact form empty, you cannot send your message.
6. Who receives your data
We do not sell your data or share it with resellers, integrators or other companies. We transfer it only where the service or the law requires, to the recipients below and for the purposes stated.
| Recipient | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting and protecting the site, checking the forms for bots, storing form records, forwarding the forms to us |
| Our email provider | Hosting the info@ytcontrol.com mailbox |
| Showing the map on the Contact page; measuring site use with Google Analytics if you allow it | |
| Message Management System (İYS) | Recording your email consent and any refusal |
| Authorized public bodies and courts | Providing information where the law requires it |
7. Transfers abroad
Cloudflare and Google are established abroad and provide their services from servers outside Türkiye. We store form records in a Cloudflare database in the European Union jurisdiction. We make these transfers in line with Article 9 of the KVKK.
8. When a retention period ends
We delete, destroy or anonymize your data when its period ends. If there is a dispute, we may keep it for as long as we need to protect our rights (KVKK Art. 5/2-e).
9. Data security
Under Article 12 of the KVKK, we take the technical and organizational measures needed to protect your personal data against unlawful processing, unauthorized access and loss. Traffic to this site travels over an encrypted connection (HTTPS), and only authorized persons can access the records. No transmission over the internet can be absolutely secure. If we learn that your data has been obtained unlawfully, we make the notifications the law requires.
10. Your rights
Article 11 of the KVKK gives you the right to:
- Learn whether we process your personal data and, if we do, request information about it
- Learn the purpose of the processing and whether we use the data for that purpose
- Know the third parties in Türkiye or abroad that receive your data
- Ask us to correct data that is incomplete or wrong
- Ask us to delete or destroy your data under the conditions in Article 7 of the KVKK
- Ask us to tell the third parties that received your data about any correction or deletion
- Object to a result against you that comes only from automated analysis
- Claim compensation if unlawful processing causes you damage
You can withdraw your explicit consent at any time. Withdrawal does not affect processing carried out before it.
11. How to apply to us
You can send a written application to the address in section 1. You can also send it to info@ytcontrol.com using registered electronic mail (KEP), a secure electronic signature or a mobile signature, or from an email address you have already given us.
Include:
- Your first and last name, and your signature on a written application
- Your Turkish ID number; if you are a foreign national, your nationality and your passport or ID number
- Your address for notices
- Your email address and phone number, if you have them
- Your request
We conclude your application free of charge within 30 days at the latest. If it involves a separate cost, we may charge the fee set by the Personal Data Protection Board.
If we reject your application, you find our answer inadequate, or we do not answer in time, you can complain to the Personal Data Protection Board within 30 days of learning our answer, and in any case within 60 days of your application (KVKK Art. 14).
12. European Economic Area and United Kingdom
If you are in these regions and the General Data Protection Regulation (GDPR or UK GDPR) applies to you, you can also ask to port your data, object to processing based on legitimate interests, and complain to the data protection authority of your country. The legal bases in this notice correspond to these GDPR articles: explicit consent, Art. 6(1)(a); contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c); legitimate interests, Art. 6(1)(f).
13. Changes to this notice
We update this notice when the way we process data or the law changes, and we announce significant changes on this page. Last updated: November 6, 2026.