Data Protection Notice

Data controller

The operator of the ISMS Guide platform is the data controller for account registration, website, contact, security and platform administration activities.

Personal data, collection method and purposes

Identity and contact data, account and transaction records, company membership information, request content and technical security data are collected electronically through forms, account activity, cookies and service logs. They are processed to provide and secure the service, manage memberships, respond to requests, maintain legal records and prevent abuse.

Legal grounds

Processing is carried out where it is necessary for establishing or performing a contract, complying with a legal obligation, establishing or protecting a right, or pursuing legitimate interests without harming fundamental rights. Activities requiring consent are handled separately.

Transfers

Personal data may be shared with authorized public bodies where legally required and with infrastructure, database, email, security and analytics service providers to the extent necessary. International transfers are made only using a method permitted by KVKK.

• Supabase for database, authentication and file storage.
• Mailtrap for transactional email delivery.
• Google Analytics for optional consent-based website measurement.
• Coolify-managed hosting and the underlying hosting provider for application operation and backups.

Rights under Article 11

• Learn whether personal data is processed and request information about it.
• Learn the purpose of processing and whether data is used accordingly.
• Learn the recipients to whom data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction where the legal conditions are met.
• Object to a result arising exclusively from automated analysis and claim compensation for unlawful processing.

How to apply

Submit your request through the contact form with enough information to verify your identity and understand the request. Additional verification may be requested to protect account data.