1. General Information

This Privacy Policy explains how Otto Scientific (“Site,” “we,” “our company”) collects, processes, stores, and protects personal data within the ottosci.com domain. It has been prepared in full compliance with Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the applicable regulations.

By reading this Policy and continuing to visit the Site or use our services, you acknowledge that you understand how your personal data may be processed within this scope.

2. Data Controller Information

3. What Personal Data May Be Collected?

During your visit and use of the Site, the following categories of data may be collected:

  • Technical / functional data: encrypted or anonymized IP address, browser information (user agent), device type, screen resolution, referrer URL, and page or data load details.
  • Cookie data: preference and anonymous identifier cookies such as ottosci_vid and ottosci_consent.
  • User-provided data: name, surname, email address, or similar information shared via forms, contact requests, or subscriptions (when applicable).
  • Analytics / statistical data: usage metrics such as page IDs, duration of visits, and pages viewed.

4. Purposes and Legal Grounds for Processing

Collected personal data are processed for the purposes and legal bases listed below:

  • Analyzing Site usage, optimizing performance, and improving the user experience under our legitimate interests.
  • Anonymously identifying visitors and preserving preferences through cookies activated only when explicit consent is provided.
  • Processing data to meet legal obligations, such as maintaining logs and security records.

5. Data Sharing and Transfers to Third Parties

  • Processed data may be transferred to processors, hosting providers, or analytics partners when required to deliver the service.
  • We may share data with public authorities if legally mandated to do so.
  • Data may be transferred abroad, provided that the applicable legislation and security standards are upheld.

6. Retention Periods

  • ottosci_vid cookie: retained for 12 months.
  • ottosci_consent cookie: retained for 12 months.
  • Other data records are deleted or anonymized once the purpose of processing ends or anonymization becomes possible. If the law requires or permits longer retention, the period may be extended accordingly.

7. Security Measures

  • Technical and administrative controls are enforced, including parameterized SQL queries, storing IP addresses in VARBINARY format via inet_pton, and issuing cookies with SameSite=Lax plus the Secure flag over HTTPS.
  • Analytics cookies remain inactive unless the visitor grants explicit consent.
  • Data access is restricted to minimally authorized personnel and subject to access controls.

8. Data Subject Rights

Under Article 11 of Law No. 6698, you have the following rights as a data subject:

  • Learn whether your personal data are processed.
  • Request information if your data have been processed.
  • Learn the purpose of processing and whether the data are used in line with that purpose.
  • Know the third parties in Turkey or abroad to whom your data are transferred.
  • Request correction if your data are incomplete or inaccurate.
  • Request deletion or destruction of data under the conditions stipulated in the law.
  • Object to outcomes to your detriment that arise from data being analyzed exclusively through automated systems.
  • Request compensation for damages if your data are processed unlawfully.

You can submit your requests by emailing privacy@ottosci.com or through the application form that will be provided on our website.

9. Updates to This Policy

We may update this Policy to reflect changes in our services, technology stack, or applicable legislation. The latest version will be published on our website and will take effect upon release.