Notice on the Protection of Personal Data
Text dated 13 November 2026
This notice informs natural persons who visit the sosocad.com product website, contact us by email or subscribe to our newsletter about their personal data. The processing of user and customer data in the SoSo CAD application is outside the scope of this notice. The Contact page provides our email address and an external link to the sosomaps.com contact form. Data submitted through that external form is subject to that site’s notice. This notice is given under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
Data controller
The data controller is SoSo Labs Teknoloji A.Ş. Address: İvedik OSB Mah. 2224 Cad. No: 1 İç Kapı No: 116 Teknopark Ankara, Yenimahalle / Ankara, Türkiye. MERSİS number 0775100860100001; address for personal data requests kvkk@soso-labs.com. Company details are on the Imprint page.
Which data is processed, for what purpose and on what legal basis?
| Data | Purpose of processing | Legal basis under Law No. 6698 |
|---|---|---|
| IP address, access time, requested URL and browser information | Securing the site; investigating errors and misuse | Our legitimate interest in operating a secure site, provided your fundamental rights and freedoms are not harmed; Art. 5/2-f |
| Your email address; the name, organisation, role and telephone details you share in your message; the content of your request and correspondence | Assessing your contact or quotation request, answering you and following up your request | Our legitimate interest in conducting corporate communication; Art. 5/2-f. Where you are personally the party to the contract, Art. 5/2-c for data directly related to and necessary for concluding or performing it |
| For the newsletter: your email address, language preference, the page where you subscribed, the version of the explicit consent text you agreed to; the times of consent, confirmation and unsubscribing | Sending the data centre events and new resources newsletter by email; verifying through a confirmation link that the subscription request belongs to the owner of the address (double opt-in); proving consent and its withdrawal | Your explicit consent; Art. 5/1. You may withdraw your consent at any time with one click from the link in every issue or by writing to kvkk@soso-labs.com; withdrawal does not affect the lawfulness of earlier processing. |
| Access records and correspondence relating to a specific dispute | Establishing, exercising or defending a right | Art. 5/2-e |
| Identity, contact and request details in your application; records relating to a binding official request | Handling personal data applications and fulfilling statutory obligations | Art. 5/2-ç; for personal data applications also Art. 13 |
Apart from the newsletter you subscribe to with your explicit consent, data is not used to send marketing or informational messages. Please do not include in your messages personal data unrelated to your request, special categories of personal data, or other people’s information.
Method of collection and cookies
Access records are created automatically on the server when you visit the site. Data you share by email is obtained electronically when you send the email; your written applications are likewise processed in order to examine the application. Newsletter data is obtained electronically when you complete the subscription form on the site and open the confirmation link sent to you by email.
The product website uses no cookies, advertising tracking or visitor analytics. Details are in the Cookie Policy. That no cookies are used does not mean no server access records are kept.
Transfers
The servers that hold the site and its access records are owned by SoSo Labs Teknoloji A.Ş. and located in a data centre in Türkiye.
Email correspondence is handled through Microsoft 365, which we use as our business email service. Your email address, the content of your message and any personal data you share in attachments are transferred to the email service provider, Microsoft, for the purposes of receiving, transmitting, storing and answering correspondence. Storage of personal data abroad or making it accessible from abroad under this service is a transfer abroad within the meaning of Article 9 of the Law and requires the transfer conditions of that article to be met.
Newsletter and subscription confirmation emails are sent through SoSo Labs’ central mail infrastructure by an email delivery service provider acting as data processor. For this purpose your email address, language preference and the content of the message are transferred to that provider solely to deliver the message. Where the provider’s servers are located abroad or the data can be accessed from abroad, the transfer is made in accordance with the conditions of Article 9 of the Law.
Personal data may be transferred to competent public authorities and judicial bodies where a legally binding request or a statutory obligation so requires, limited to the request concerned. These transfers take place under Article 8 of the Law together with Art. 5/2-ç or, for a specific legal claim, Art. 5/2-e.
Retention
A 90-day file retention policy applies to server access logs. Log rotation and automatic clean-up by file age are used; rotated files older than 90 days are deleted when a new log file is created. Because the period is applied to files, it does not mean each access record is deleted exactly 90 days after it was created.
Newsletter data is kept until you unsubscribe. On unsubscribing, your email address is erased; only status, dates and the consent text version, which contain no personal data, remain. Unconfirmed subscription requests are erased in full 30 days after they are made.
For email correspondence, the period necessary to conclude and follow up the request applies. Where there is a specific dispute or a statutory retention obligation, only the relevant records are kept for as long as that reason requires. When the conditions for processing cease to exist, data is erased, destroyed or anonymised in accordance with Article 7 of the Law.
Your rights and how to apply
Under Article 11 of the Law you have the right to learn whether your data is processed and whether it is used in line with its purpose, to request information, to learn the persons to whom it is transferred in Türkiye or abroad, to have it corrected, to have it erased or destroyed under the statutory conditions and to have recipients notified of these operations, to object to results against you that arise solely from automated analysis, and to claim compensation for damage arising from unlawful processing.
You may send your requests to kvkk@soso-labs.com from the email address you previously gave us and that is recorded in our system, or by an application signed with a secure electronic signature or mobile signature. You may also send a written, signed application to the company’s registered address (İvedik OSB Mah. 2224 Cad. No: 1 İç Kapı No: 116 Teknopark Ankara, Yenimahalle / Ankara, Türkiye). The procedure is governed by the Communiqué on the Principles and Procedures for Application to the Data Controller.
Your application must include your first and last name; your signature if the application is written; for Turkish citizens the T.C. identity number, for foreigners nationality and passport number or identity number if any; your residential or business address for notifications; your email address, telephone and fax number for notifications, if any; and the subject of the request. Please attach information and documents relating to your request.
Applications are concluded free of charge as soon as possible according to their nature and within 30 days at the latest. If the operation entails an additional cost, the tariff set by the Board may be applied. If the application concerns an error attributable to our company, any fee charged is refunded.