Document Reference: PP-KVKK-2026-V3 | Last Updated: June 30, 2026
1. Data Controller Identification
This Privacy Policy and Clarification Text has been prepared by USTECH Innovations LLC ("USTECH", "Company", "we", "us", or "our"), headquartered at 30 N Gould St Ste 34301, Sheridan, WY 82801, USA, in our capacity as the Data Controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the EU General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act ("CCPA/CPRA"). This document governs the processing of personal data collected through our B2B website, online service portals, contact channels, and marketing platforms.
2. Categorization of Processed Personal Data
In alignment with national and international data protection laws, we categorize the personal data we process as follows:
- Identity Information: First name, last name.
- Contact Information: Corporate email address, direct business telephone/mobile number, physical business address, and country of operation.
- Professional & Employment Information: Job title, department, company name, industry sector, and technical areas of interest.
- Transaction Security & Technical Information: IP address, device type and operating system, browser specifications, system activity logs, cookie IDs, and detailed website navigation paths.
- Customer Transaction Information: Quotation requests, details of analytical challenges submitted via forms, interest in specific spectrometer systems, and communication history.
3. Legal Bases and Purposes of Processing
Your personal data is collected and processed through automatic or semi-automatic means based on the legal grounds set forth in Article 5 of the KVKK and Article 6 of the GDPR:
A. Performance and Execution of Contracts (KVKK Art. 5/2/c, GDPR Art. 6/1/b):
To evaluate B2B inquiries, formulate commercial quotations, deliver analytical hardware (such as ProLine or MasterLine spectrometers), manage licenses for caliX/ProChem software suites, and deliver post-sale calibration tune-ups and customer support services.
B. Data Controller's Legitimate Interests (KVKK Art. 5/2/f, GDPR Art. 6/1/f):
To maintain network security, perform diagnostics and debugging, analyze traffic trends to optimize website user experience, detect and prevent malicious activities, and protect our proprietary rights and intellectual assets.
C. Explicit Consent of the Data Subject (KVKK Art. 5/1, GDPR Art. 6/1/a):
To distribute technical whitepapers, send industry-specific newsletters, invite you to scientific webinars, and share promotional updates. You have the right to withdraw this consent instantly via subscription links in our emails.
D. Compliance with Legal Obligations (KVKK Art. 5/2/a, GDPR Art. 6/1/c):
To adhere to tax regulations, commercial accounting standards, international trade laws, export controls on dual-use analytical equipment, and binding requests from courts or judicial authorities.
4. Cross-Border Data Transfers
To operate our B2B services, USTECH utilizes secured cloud infrastructure located in the United States. Consequently, personal data collected from users in Turkey, the European Union, and other global regions is transferred internationally to the US. We secure these transfers in compliance with GDPR (Chapter V) using Standard Contractual Clauses (SCCs) and seek your explicit consent when you submit web forms in compliance with KVKK Article 9 regulations.
5. Data Sharing & Sharing Categories
We enforce a strict policy against selling, sharing, or leasing personal data to third parties. We may disclose data only to: (a) local authorized USTECH sales and service partners in your jurisdiction to process regional requests directly; (b) cloud hosting, CRM (such as HubSpot/Salesforce), and security service providers bound by strict Data Processing Agreements (DPAs); (c) legally authorized public institutions when necessary to comply with legal mandates.
6. Data Retention and Deletion
We store your personal data only as long as necessary for the processing purposes detailed herein, or as mandated by applicable statutory limitation periods. Information submitted via contact or RFQ forms is retained for a maximum of 36 months following the last communication, unless it converts into a customer contract. Marketing consent data is stored until consent is explicitly withdrawn, after which it is securely destroyed or anonymized.
7. Technical and Organizational Security Measures
To protect personal data from unauthorized access, alteration, loss, or leakage, USTECH implements industry-standard controls:
- All data transit is encrypted using Secure Sockets Layer (SSL) / TLS 1.3 protocols.
- Access to database systems is restricted through zero-trust access controls and multi-factor authentication (MFA).
- Periodic vulnerability scanning, firewalls, and server-side threat detection systems are active.
- All staff handling client data undergo periodic data security and privacy training.
8. Global Privacy Rights
Depending on your legal residence, you are entitled to several specific rights regarding your personal data:
A. Data Subject Rights Under Turkey's KVKK (Article 11):
- To learn whether your personal data is being processed,
- To request information if your personal data has been processed,
- To learn the purpose of the processing and whether the data is used in line with this purpose,
- To know the third parties to whom your personal data has been transferred domestically or internationally,
- To request the rectification of personal data if it has been processed incompletely or inaccurately,
- To request the erasure or destruction of your personal data under the conditions laid down in Article 7 of the KVKK,
- To request that the third parties to whom your personal data was transferred be notified of the rectification, erasure, or destruction operations,
- To object to any outcome detrimental to you resulting from the analysis of your processed data exclusively through automated systems,
- To demand compensation for damages incurred due to the unlawful processing of your personal data.
B. EU GDPR Rights:
- Right to access, correct, update, or request deletion of your personal data.
- Right to object to processing, restrict processing, or request data portability.
- Right to withdraw consent at any time without affecting the lawfulness of prior processing.
C. California CCPA/CPRA Rights:
- Right to know what categories of personal information we collect and disclose.
- Right to request deletion and correction of personal information.
- Right to opt out of the sale or sharing of your personal information (Do Not Sell/Share).
- Right to non-discrimination for exercising your privacy rights.
9. Application and Contact Procedure
You may submit requests to exercise your rights by emailing privacy@ustechinnovations.com. For applications originating from Turkey under the KVKK, requests must comply with the "Communiqué on Application Procedures and Principles to the Data Controller". Applications must contain: Name, Surname, wet signature (if written), Turkish ID number (or Passport Number/nationality for foreign nationals), physical address for response, contact email, and clear details of the request. Requests will be processed within 30 days free of charge.
10. Cookies
We use cookies to enable core website services and to collect anonymized telemetry. Essential cookies are loaded automatically. Functional and analytical cookies (such as tracking site usage) are disabled by default and will only run if you provide consent via our Cookie Banner. You can manage, alter, or reject these cookies at any time.
11. Corporate Contact Details
USTECH Innovations LLC
30 N Gould St Ste 34301, Sheridan, WY 82801, USA
Email: privacy@ustechinnovations.com
Phone: +1 307 527 0072
