KVKK Privacy Notice

1. Data controller

The data controller is MANUS YAZILIM MAKİNA ELEKTRONİK DAN. MÜH. SAN. VE TİC. A.Ş. ("MANUS", "we"), a CNC software company operating since 2008.

2. What personal data we process

We only process the data you actively submit through the forms on this website, plus a minimal set of technical data needed to keep those forms working.

• Identity and contact data — first name, last name, work email, phone number, company name (contact form, product request form, demo requests).
• Request content — your message, the CNC machine / control unit / CAM system you specify, and any file you attach to a product request (for example an NC program or CAD/CAM file).
• Newsletter data — email address, if you subscribe to the newsletter.
• Technical data — IP address and browser user-agent of form submissions, recorded solely to prevent abuse and spam; timestamps of the submission.
• Session data — for administrators only, a signed session cookie used to keep the content management panel logged in. The public website sets no advertising or analytics cookies.
• Visit statistics — page address, referring page, browser, operating system, screen size, browser language and country, collected by analytics software running on our own server. No cookie is used, no advertising identifier is set, and the data is not shared with any third party. Visits are counted without keeping your IP address; it is only used to derive a daily-rotating one-way hash so that one visitor is not counted twice on the same day.

3. Why we process it

• To answer your questions and prepare the demo, quotation or trial you requested.
• To deliver the newsletter you subscribed to, and to let you unsubscribe.
• To evaluate a product request and, where you attached a file, to run the requested post-processing / simulation / optimization work on it.
• To keep records of pre-contractual communication and to comply with our legal obligations.
• To keep the website and the forms secure, and to detect and prevent abuse.

4. Legal grounds

Depending on the data, we rely on the following grounds under Articles 5 and 6 of the KVKK:

• Art. 5/2-c — processing is necessary for the establishment or performance of a contract (demo, trial, quotation and support requests).
• Art. 5/2-ç — compliance with a legal obligation.
• Art. 5/2-f — legitimate interests of the data controller, provided your fundamental rights are not harmed (site security, abuse prevention, record keeping).
• Art. 5/1 — your explicit consent, for the newsletter and for any optional information you choose to share.

5. Who we share it with, and transfers abroad

We do not sell personal data and we do not share it for advertising purposes. We use the following service providers as data processors; some of them store data outside Turkey, which constitutes a transfer abroad within the meaning of Article 9 of the KVKK.

6. How long we keep it

• Form submissions and lead records: for the duration of the business relationship and afterwards for the statutory limitation periods, then deleted or anonymized.
• Newsletter data: until you unsubscribe; unsubscribing removes you from the mailing list.
• Files attached to product requests: kept for as long as needed to perform the requested work, then deleted on request.
• Technical security records (IP, timestamps): kept for a short period sufficient for abuse prevention.

7. Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed, and request information about it;
• learn the purpose of processing and whether the data is used consistently with that purpose;
• learn the third parties to whom the data is transferred, in Turkey or abroad;
• request correction of incomplete or inaccurate data, and ask that this correction be notified to the recipients;
• request erasure or destruction of your data where the conditions in Article 7 apply;
• object to a decision made solely by automated processing that produces an adverse result for you (we do not make such decisions);
• claim compensation for damage caused by unlawful processing.

8. How to exercise your rights

Your request must contain the information required by the Communiqué on Application Procedures to the Data Controller: your name, Turkish ID number (or nationality and passport number for foreign nationals), your address or email for notification, and the subject of your request. We respond within thirty days at the latest, free of charge unless the response requires an additional cost.

• in person at the address above, with an identity document;
• through a notary public;
• using a secure electronic signature, a mobile signature or a registered electronic mail (KEP) address under Law No. 5070 — if you wish to use this channel, you may request our KEP address at info@manusnc.com;
• by email to info@manusnc.com from an address you have previously registered with us.

9. Changes to this notice

We may update this notice when our processing activities or the relevant legislation change. The current version is always published on this page with its date.