Privacy Notice for Demo, Webinar and Contact Forms
Explains how we process the personal data you share through our demo, webinar, contact and free tool report forms.
Last updated: 2026-10-12
This is a courtesy English translation. In case of any discrepancy, the Turkish version prevails as it is governed by Turkish law (Law No. 6698 on the Protection of Personal Data, “KVKK”).
This privacy notice is provided by SUB IQ YAZILIM ÇÖZÜMLERİ TİCARET LİMİTED ŞİRKETİ (the “Company”, “validrelay”) as data controller, pursuant to Article 10 of the KVKK and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
1. Data controller
SUB IQ YAZILIM ÇÖZÜMLERİ TİCARET LİMİTED ŞİRKETİ
SİLAHTARAĞA MAH. ÜNİVERSİTE 1. SK. NO:13/1 İÇ KAPI NO : Z16 ÇORLU TEKİRDAĞ
MERSIS: 0781108676200001 · Tax ID: 7811086762 (ÇORLU V.D.)
Registered e-mail (KEP): subiqyazilim@hs06.kep.tr
E-mail: info@subiq.com.tr · Phone: 444 85 39
2. Scope
This notice covers the personal data you share through the demo request form, the webinar registration form, the contact form and the form for receiving the results of our free tools by e-mail on our website (together, the “Request Forms”), and the communication we have with you following these requests. Personal data processed in connection with platform membership and use is covered by our Privacy Policy.
3. Personal data we process
| Category | Data |
|---|---|
| Identity | First name, last name |
| Contact | Work e-mail address, phone number (optional) |
| Professional | Your company, job title (optional) |
| Request details | Request type (demo, webinar, contact, tool report), your message, the plan you are interested in, your answer to “How did you hear about us?” |
| Marketing and visit data | The address of the first page you opened on our website (landing page), the address of the page that referred you to our website (referrer), campaign parameters in the address (UTM: source, medium, campaign, term, content), site language |
| Transaction security | A keyed one-way hash of your IP address (HMAC; the IP address itself is not stored), submission time, and the time between opening and submitting the form to distinguish automated submissions (checked only, not stored) |
| Consent records | The version of this notice shown to you, your consent to commercial electronic messages, its date and, if you withdraw it, the date of withdrawal |
The Request Forms do not ask for special categories of personal data (e.g. health data); please do not include such data in your message. The Request Forms do not store cookies or similar records on your device; campaign parameters and the referrer are read only at the moment you submit the form, from the page information your browser already holds for that session.
4. Purposes of processing
- Receiving, assessing and responding to your demo, quotation, information and contact requests,
- Creating your webinar registration and informing you about the event (joining link, reminders, sharing the recording and slides),
- Sending you the results of the free tool you requested by e-mail,
- Carrying out pre-contractual processes and managing customer relations,
- Measuring the effectiveness of our marketing channels and campaigns on an aggregated (not individual) basis,
- Preventing abuse of the forms (spam, automated submissions) and ensuring information security,
- If you consent: sending commercial electronic messages about product, feature, event and regulatory updates,
- Complying with legal obligations and requests from competent authorities.
5. Legal grounds and method of collection
Your personal data is collected electronically through the Request Forms and partly by automated means (page address, referrer and campaign parameters from your browser; the IP hash on our server), and is processed on the following legal grounds under Article 5(2) of the KVKK:
- Necessity for the establishment or performance of a contract (Art. 5(2)(c)): responding to your demo and quotation request, your webinar registration and sending the tool results you requested.
- Legitimate interest (Art. 5(2)(f)): keeping and following up request records, aggregated campaign measurement, abuse prevention and information security (including the IP hash), provided that your fundamental rights and freedoms are not harmed.
- Legal obligation (Art. 5(2)(ç)) and the establishment, exercise or protection of a right (Art. 5(2)(e)): requests from competent authorities and potential disputes.
- Explicit consent (Art. 5(1)): sending commercial electronic messages. This consent is obtained through a separate, optional checkbox on the form; not giving it does not affect how we respond to your request. Consent and its withdrawal are recorded with their dates under Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages and, once registration becomes mandatory, are also notified to the Message Management System (İYS). You can withdraw your consent at any time, without giving reasons and free of charge, via the opt-out link in every commercial message we send you or by writing to info@subiq.com.tr (consents registered with İYS can also be withdrawn via İYS). Your withdrawal is recorded and no further commercial electronic messages are sent to you.
6. Transfers
Your personal data is not sold and is not shared with third parties for their marketing purposes. It may be transferred, only to the extent necessary for the purposes above and in accordance with Articles 8 and 9 of the KVKK, to:
- Providers of server, hosting and corporate e-mail services (processors acting only on our behalf and instructions),
- Our legal, financial and technical advisers (where necessary and under confidentiality obligations),
- Competent public authorities and courts upon request.
The servers of some of our infrastructure and e-mail providers may be located outside Türkiye. In that case the transfer is carried out with the safeguards provided for in Article 9 of the KVKK (e.g. signing the standard contract announced by the Personal Data Protection Board and notifying it to the Board). We will share the current providers and countries upon request.
7. Retention
- Demo, quotation and contact requests: 2 years from the conclusion of the request; if the request leads to a contract, for the statutory periods applicable to the contractual relationship.
- Webinar registrations: 1 year from the event date.
- Requests to receive tool results by e-mail: 1 year from delivery.
- Consent to commercial electronic messages: until withdrawn; after withdrawal, the consent and withdrawal records are kept as evidence for the period required by the applicable legislation (3 years).
- IP hash: together with the request record; temporary counters used for rate limiting are kept for at most 25 hours.
When the period expires or your erasure request is accepted, your personal data is deleted or anonymised; only aggregated information that cannot identify you (request type, date, campaign source) may remain in our records. An erasure request also withdraws your consent to commercial electronic messages; in that case the consent and withdrawal dates are kept in a form that cannot identify you.
8. Your rights under Article 11 of the KVKK
By applying to the Company, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used in line with that purpose,
- know the third parties to whom it is transferred in Türkiye or abroad,
- request its correction if it is incomplete or inaccurate,
- request its erasure or destruction under the conditions of Article 7 of the KVKK,
- request that correction, erasure and destruction be notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation if you suffer damage due to unlawful processing.
9. How to apply
You may submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with information identifying you: in writing to our address above, with a secure electronic signature to our registered e-mail (KEP) address subiqyazilim@hs06.kep.tr, or from the e-mail address you provided in the form to info@subiq.com.tr. Your application will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Board may apply. If your application is rejected, the response is insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board under Article 14 of the KVKK.
10. Visitors from the European Union
For visitors from the European Economic Area, to the extent the General Data Protection Regulation (GDPR) applies, the processing described above is based on Art. 6(1)(b) GDPR (pre-contractual steps), Art. 6(1)(f) (legitimate interests) and Art. 6(1)(a) (consent; commercial messages). These visitors may exercise their rights of access, rectification, erasure, restriction, data portability and objection under Art. 15–22 GDPR through the contact channels above, and may lodge a complaint with the supervisory authority in their country.
11. Changes
This notice is updated when necessary; the current version is published on this page. Version: 1 · Last updated: 2026-10-12.