Privacy Policy

Incuba is the controller of the personal data processed through this site.

Controller

Incuba

Address

To be completed before publication.

Email

[email protected]

This site does not create visitor accounts and does not run marketing tracking. We process only the following.

Request form

Full name, work email address, organization, phone (optional), number of sites, expected start date, and the free-text details you provide.

Technical logs

Server logs kept by the infrastructure that hosts the site: IP address, request time, requested address and browser information. These are generated automatically for security and error tracking.

Cookie

A single functional cookie that remembers your language choice. See the Cookie Policy.

We do not ask for special category data (health data, biometric data and similar) on this site. Please do not enter such data or any patient information in the free-text field.

• To assess the service request you send and respond to you
• To agree scope, timeline and reporting expectations with you
• To prepare a proposal and run the contracting process where requested
• To keep the site secure and to fix technical faults
• To meet obligations that apply to us under law

We do not use the information you send for marketing messages without your consent, and we do not sell it to third parties.

We process your data to assess your request and to conduct pre-contractual discussions, on the basis that processing is directly related to the conclusion or performance of a contract.

We process technical logs on the basis of our legitimate interest in keeping the site secure. Retention obligations under law are reserved.

For the Turkish law basis and the corresponding articles of Law No. 6698, see the KVKK Disclosure Notice.

We share your data only to the extent needed to deliver the service, through the following providers.

Vercel Inc.

Hosting of the website and server logs. Based in the United States, global infrastructure.

Resend (Plus Five Five, Inc.)

Delivery of request form submissions by email. Based in the United States.

Beyond these, we share data only where required by law or on a duly made request from a competent authority.

This page is updated when the list of providers changes.

Because the providers listed above operate infrastructure outside Türkiye, your data may be processed abroad.

Such transfers are made in line with the requirements of Turkish data protection law and, where applicable, the GDPR, using the legal mechanisms required for the transfer. You can ask us for details of these arrangements.

Requests that do not proceed

Up to 2 years after the assessment is completed, so that we understand the history if the same organization contacts us again.

Requests that become contracts

For the duration of the contractual relationship and, after it ends, for the limitation and retention periods required by law.

Technical logs

Short term, per the retention policy of the infrastructure provider.

Data is deleted, destroyed or anonymized once its retention period expires.

• The site and form submissions run over an encrypted connection (HTTPS)
• Only the team handling the assessment can access request contents
• Our relationship with providers is governed by data processing terms
• Access rights are reviewed when roles change

No transmission method is absolutely secure. If you have a concern about the security of your data, please tell us.

You have rights over your personal data under applicable law: to learn whether it is processed, to request information about it, to have it corrected or erased, to object to processing, and to seek redress if you suffer damage.

To exercise these rights, write to [email protected]. The procedure and response times under Turkish law are set out in the KVKK Disclosure Notice.

We may update this policy. The current version is always published on this page with its effective date shown under the title.