Data controller
This privacy notice is issued by LavieuxLabs (“LavieuxLabs”, “we”) as data controller under Article 10 of Turkey’s Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
- Name
- LavieuxLabs
Scope
This notice covers the processing of personal data of individuals who visit our website, use the contact and Letter of Intent (LOI) form, or contact us by email.
No patient data is processed on this site. Health data that may be processed in pilot and validation studies is handled separately from this notice, under a data processing agreement signed with the institution, ethics committee approval and a separate information notice. Please do not send patient data or other special categories of personal data through our contact channels.
Categories of personal data
| Category | Examples |
|---|---|
| Identity | First name, last name |
| Contact | Work email address |
| Professional | Organisation name, job title |
| Request content | Product of interest, request type, message content and correspondence |
| Transaction security | Hosting infrastructure logs such as IP address, browser information and access time |
| Preferences | Your cookie consent choice (Cookie Policy) |
Purposes of processing
- Receiving, assessing and answering demo, pilot, Letter of Intent (LOI) and collaboration requests;
- Carrying out institutional communication and collaboration processes;
- Planning and recording pre-contract discussions;
- Keeping the website secure and available;
- Meeting legal obligations and answering requests from competent authorities.
Collection method and legal bases
Your personal data is collected through the information you enter in the contact form, which is delivered to our company email address by our email delivery provider when you submit it, the emails you send us directly, and automatically by the website infrastructure. It is processed on the following legal bases under Article 5(2) of KVKK:
- Art. 5(2)(c): processing is directly related to concluding or performing a contract (pilot, LOI and collaboration discussions);
- Art. 5(2)(ç): processing is necessary for the data controller to meet a legal obligation;
- Art. 5(2)(f): processing is necessary for the data controller’s legitimate interests (answering requests, site security), provided it does not harm your fundamental rights and freedoms.
Processing that relies on explicit consent, such as non-essential cookies, takes place only after you give consent, and you can withdraw consent at any time.
Transfers of personal data
Limited to the purposes above, your personal data may be transferred to the providers of our email, form delivery and hosting services, to public institutions legally authorised to receive it, and to competent authorities on request.
If you load the location map on the contact page, data such as your IP address and browser information is sent directly to Google, which provides the map; the map loads only with your consent or at your request. Where our service providers’ servers are located outside Türkiye, transfers follow the mechanisms set out in Article 9 of KVKK. Your personal data is not sold or rented to third parties for marketing.
Retention and security
Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set by law. When these periods end, the data is deleted, destroyed or anonymised.
To keep your data secure, we apply administrative and technical measures such as limiting access to authorised staff, encrypting data in transit and keeping access logs.
Your rights under Article 11 of KVKK
Under Article 11 of KVKK, you may apply to the data controller to:
- Learn whether your personal data is processed;
- Request information about it if it is;
- Learn the purpose of processing and whether the data is used for that purpose;
- Know the third parties in Türkiye or abroad to whom it is transferred;
- Request correction if it is incomplete or inaccurate;
- Request deletion or destruction under the conditions in Article 7 of KVKK;
- Request that third parties who received the data are notified of any correction, deletion or destruction;
- Object to a result against you that arises solely from analysis by automated systems;
- Claim compensation if you suffer damage because of unlawful processing.
How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send requests about your rights, together with information that identifies you, to [email protected] with the subject line “KVKK Başvurusu” (KVKK application).
Your application is concluded free of charge as soon as possible and within thirty days at the latest, depending on its nature. If the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged.
Changes to this policy
This policy may be updated as the law or our activities change. The current version is always published on this page; the “Last updated” date at the top shows the most recent change.