1. Identity of the data controller
| Item | Value |
|---|---|
| Company | Clonify Labs |
| Address | Cyberpark Dikmen GO, Ankara, Türkiye |
| info@clonifylabs.com | |
| Data protection requests | kvkk@clonifylabs.com |
| Phone | +90 507 621 65 14 |
2. Our two roles: controller and processor
- Data controller — for website visitors, demo requesters, waitlist members, contact form senders and clinic users who open a platform account.
- Data processor — for patient data processed by clinics inside Clonify Ops, the CLINIC is the controller and we act only on the clinic's instructions. Requests about patient data must be addressed to the clinic treating you.
3. Personal data processed and how it is collected
| Channel | Data processed |
|---|---|
| Demo request form | Name, clinic name, email, phone, modules of interest, message, language |
| Waitlist form | Name, clinic/company, email, phone, role, language, consent record |
| Contact form | Name, email, subject, message, language |
| Platform account | Email, hashed password, name, clinic name, city, phone |
| Technical records | Session cookies, language cookie, server access logs |
We do not run any third-party analytics or tracking tool for advertising, profiling or behavioural tracking on our website.
4. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5) |
|---|---|
| Handling demo requests and scheduling meetings | Necessary for a contract at the data subject's request (Art. 5/2-c) |
| Waitlist management and early-access announcements | Explicit consent (Art. 5/1) |
| Responding to enquiries | Legitimate interest (Art. 5/2-f) |
| Creating the account, authentication and service delivery | Performance of a contract (Art. 5/2-c) |
| Information security and abuse prevention | Legitimate interest (Art. 5/2-f) |
| Statutory retention and reporting duties | Compliance with a legal obligation (Art. 5/2-ç) |
5. Transfers
- Hosting and database providers (data residency configured for Türkiye)
- Email and SMS delivery providers — only the contact detail required to send the notification
- Competent public authorities — only where legally required
We never sell, rent or transfer your personal data to third parties for marketing purposes.
6. Retention periods
| Data | Retention |
|---|---|
| Demo and contact requests | 2 years after the request is closed |
| Waitlist record | Until consent is withdrawn, at most 3 years |
| Account and membership records | 10 years after account closure (commercial law) |
| Server access and security logs | 12 months |
7. Your rights under KVKK Art. 11
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose and whether it is used accordingly
- Know the third parties to whom it is transferred at home or abroad
- Request rectification if incomplete or inaccurate
- Request erasure or destruction under Art. 7
- Request that such actions be notified to third parties
- Object to a result against you produced solely by automated analysis
- Claim compensation for damage caused by unlawful processing
8. How to apply
Send your request by email to kvkk@clonifylabs.com or in writing to Cyberpark Dikmen GO, Ankara, Türkiye. Your application must clearly state your name, contact details and the subject of your request. We respond free of charge within thirty days at the latest.
For questions: kvkk@clonifylabs.com