Distribution transformer design optimization
Privacy Policy
Version 1.0 — 01.08.2026
This notice fulfils our information obligations under Article 13 of the EU General Data Protection Regulation (GDPR) and Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) together.
Data controller: Ecitron — support@ecitron.com
Division of roles: We act as data controller in respect of account holders and visitors. In respect of your own customer and employee data that you upload to the Platform, you are the data controller and we are the data processor.
What we process
| Category | Data |
|---|---|
| Identity and contact | Name, surname, e-mail, company name |
| Account | Password hash, language and theme preference, role |
| Security | IP address, session records, login times, browser information |
| Usage | Calculation run records, error logs |
| Agreement acceptance | Version of the document accepted, time of acceptance, IP |
| Support | Request content and correspondence |
We do not process special categories of personal data. Please do not enter such data into free-text fields.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Account creation, authentication, provision of the service | Performance of a contract |
| Providing support | Performance of a contract / legitimate interests |
| Security, abuse prevention, logging | Legitimate interests / legal obligation |
| Improving the service, fixing errors | Legitimate interests |
| Evidencing acceptance of agreements | Legitimate interests / legal obligation |
| Product announcement e-mails | Consent |
Who we share it with
Our cloud infrastructure provider (servers located in the EU), our e-mail service provider, our error monitoring tool, and competent public authorities upon lawful request. We do not sell your data.
International transfers
Servers are located within the European Union. As our support and development team is based in Turkey, access from Turkey may occur; this transfer is safeguarded by the EU Standard Contractual Clauses (SCC). For KVKK purposes, the mechanisms set out in Article 9 apply.
How long we keep it
- Account and design data: while the account is active + 30 days after termination
- Agreement acceptance records: 10 years
- Security logs: 12 months
- Support correspondence: 3 years
- Marketing consent: until withdrawn, then 3 years for evidentiary purposes
At the end of these periods, data is deleted or anonymised.
Your rights
You have the right to learn whether your data is being processed, to request information and a copy, to have it rectified or erased, to request restriction of processing, to know the third parties to whom it has been transferred, to data portability, to object to processing, to withdraw your consent, and to claim compensation for damage suffered.
Requests: support@ecitron.com — answered within 30 days at the latest.
Complaints: You may lodge a complaint with the data protection authority of your country of residence in the EU, or with the Turkish Personal Data Protection Authority (kvkk.gov.tr).
Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects concerning you. The design results produced by the engine are technical calculations and contain no assessment of individuals.
Security
We apply TLS encryption in transit, irreversible hashing of passwords, tenant-level data isolation, role-based access control, access logging, and regular backups. No system offers absolute security; we note that additional risk exists during the beta phase.
Data breaches
In the event of a breach, we notify the competent authority and affected individuals within 72 hours.
Children
The Platform is intended solely for commercial use and is not directed at persons under 18.
Changes
This policy may be updated. Material changes will be announced by e-mail and by in-platform notification.