Privacy Policy

• Account and representative data: full name, job title, e-mail address, mobile phone number.
• Company data: company name, sector, city, founding year, total headcount and blue-collar / white-collar breakdown, annual revenue band, exporter and family-business status.
• Assessment data: answers to the HR maturity questions, calculated scores and generated report content.
• Payment and invoicing data: invoice title, VKN/TCKN, invoice address and payment transaction records.
• Technical data: IP address, browser and device information, session records, system logs and cookie data.
• Consent records: the date your consent was given, IP address, the version of the notice you accepted and the language.

The Platform uses only cookies necessary for the service to work. No advertising, profiling or third-party tracking cookies are used, and there are no third-party ad networks or social media trackers on the Platform.

You can delete or block cookies in your browser settings; however, if authentication cookies are blocked you will not be able to sign in.

• Delivering the service: account management, running the assessment, scoring and report production.
• Report personalization: producing commentary and prioritization based on the company profile (sector, size, region).
• Processing payments and invoicing.
• Security: preventing unauthorized access, misuse and fraud.
• Improving service quality and aggregated statistical analysis that does not identify the company.
• Meeting legal obligations and communicating with you.

The Platform relies on the following service providers. They process your data solely to deliver the service and within their contractual obligations:

For the legal basis and details of transfers abroad, see section 6 of the Data Protection Notice. Your information is never sold or rented to third parties for marketing purposes.

The technical and organizational measures applied to protect your data include:

• Encryption in transit: all traffic between your browser and the Platform is encrypted with TLS.
• Encryption at rest: the database and backups are stored encrypted on the provider's infrastructure.
• Row Level Security (RLS): the database isolates every record per company. A company representative cannot query another company's records at the database level.
• Role-based access: administrator (OHD) and company representative roles are separate; a representative can access only their own company's data.
• Report confidentiality: generated report content is not shown to the company representative until it has passed expert review and been published. This restriction is enforced in the database access rules, not only in the interface.
• Answer lock: once an assessment is completed, answers can no longer be changed at the database level.
• Audit trail: consent records, including date and IP address, are stored as records that cannot be altered afterwards.
• Least privilege: administrative access is kept limited and passwords are stored in irreversible form.

No system can guarantee absolute security. In the event of a data breach, data subjects and the Personal Data Protection Board are notified without delay, in line with Law No. 6698 and the Board's decisions.

Your company's assessment answers and reports belong to your company. In benchmarking studies this data is used only in aggregated form that does not identify the company. Retention periods are set out in the table in section 7 of the Data Protection Notice; at the end of those periods data is deleted, destroyed or anonymized.

You may exercise your rights under Article 11 of the KVKK, including access, rectification, erasure, learning the third parties to whom data has been transferred, and objecting to processing. For the full list of rights and the application procedure, see sections 8 and 9 of the Data Protection Notice.

This policy may be updated as the service evolves or legislation changes. The version in force and its date are shown at the top and bottom of this page. Material changes are announced on the Platform or by e-mail.

For privacy questions, requests and applications: info@hrradar.app · hrradar.app (OHD Danışmanlık).