KVKK Information Notice

1

Data controller

FUA STRC Yapı, Mühendislik, Havacılık ve Uzay Teknolojileri A.Ş.
Merkez Mah. Hasat Sk. 52/1, Şişli / Istanbul, Türkiye
Email: info@fuastrc.com · Phone: +90 850 550 00 34

SpaceTRC is a brand owned by FUA STRC. FUA STRC is the data controller for personal data processed through spacetrc.com.

2

Which personal data do we process?

• Collaboration and contact inquiries: inquiry type, organisation name, contact person’s name, email address, inquiry title and message; date of the inquiry and its receipt code.
• Technical data: access logs kept by the hosting server (IP address, date and time, requested address, browser information). To prevent abuse, some tools use an irreversibly hashed value of the IP address in short-lived counters; the IP address itself is not stored in these counters.
• Visit statistics: page views and unique visits counted without cookies, using a one-way hash of the IP address and browser information that changes every day. The hash is not used to identify you and can no longer be matched after a day.
• Administrator accounts: username, email address and session data of site administrators.

Favorites, the research notebook, notes, learning progress and observation plans are stored only in your own browser; they are not sent to us and we cannot see them.

3

Purposes

• Receiving and assessing requests for collaboration, research contributions and corporate meetings, and contacting the applicant.
• Keeping the site secure, preventing abuse and excessive requests, and detecting errors.
• Improving the site by seeing, in aggregate and anonymous numbers, which content is used.
• Fulfilling legal obligations and providing information to competent authorities when required.

4

Legal grounds

Personal data are processed on the following grounds listed in Article 5(2) of the KVKK:

• (c) processing is directly related to the conclusion or performance of a contract — assessing collaboration and meeting requests;
• (ç) processing is necessary for the data controller to comply with a legal obligation — security logs and responses to official requests;
• (f) processing is necessary for the data controller’s legitimate interests, provided that it does not harm your fundamental rights and freedoms — site security, abuse prevention and anonymous usage statistics.

The inquiry-form checkbox records access to this notice. It is not blanket consent, permission for international transfers or permission for ongoing marketing. Your inquiry is not published or added to a marketing list.

5

Who receives personal data?

• Hosting provider: the site runs on servers provided by Hostinger. Where servers or technical access are abroad, an applicable transfer condition under Article 9 of the KVKK must separately be met. This notice does not replace an executed standard contract or another valid transfer safeguard.
• Competent public authorities: only where required by law.

Your personal data are not sold and are not shared with third parties for advertising or marketing. No requests are sent to third-party services when pages load. When you start a tool, your browser may connect directly to scientific data sources such as NASA, ESA, CelesTrak or CDS; your IP address is then sent to that service and its own policy applies.

6

Method of collection

Data are collected from you through the inquiry form on the site, and automatically by the server and the analytics software while you access the site.

7

Retention

• Inquiries: kept for at most 2 years after the request is concluded, then deleted or anonymised. If a contract is concluded, the retention periods required by the relevant legislation apply.
• Server access logs: for the periods set by the hosting provider’s policy and the relevant legislation.
• Abuse-prevention counters: usually 1 hour, at most 48 hours.
• Visit statistics: kept only as aggregate numbers; no record that can be linked to a person is kept.

8

Your rights under the KVKK

Under Article 11 of the KVKK you have the right to learn whether your personal data are processed; to request information about such processing; to learn the purpose of processing and whether data are used accordingly; to know the third parties to whom data are transferred in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request erasure or destruction within the conditions of Article 7; to request that such actions be notified to third parties to whom data were transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.

9

How to apply

You can send requests regarding your rights in writing, together with information that verifies your identity, to the address above or, using an email address already registered with the company, to info@fuastrc.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are answered free of charge within 30 days at the latest, depending on their nature; if the action involves an additional cost, the fee set by the Personal Data Protection Board may apply.