KVKK NOTICE

What we collect, why, and for how long

This page describes the public marketing surface. Personal data is collected in exactly one place: the pilot request form. Browsing produces no record.

Last updated · 2026-09-04

DATA CONTROLLER

Applications go to one address.

The data controller is Dahlia Carbon Intelligence. Every application concerning this notice goes to ops@dahliaci.com (KVKK Madde 13).

ops@dahliaci.com

WHAT BROWSING COLLECTS

Browsing collects nothing. And that is measured, not asserted.

Personal data is collected in exactly one place: the pilot request form. Browsing the pages produces none of the following — these are countable facts about the pages, not claims about them.

The number box in the integrity test is not a collection point: the value you type never leaves your browser, and the package is recomputed on your own device. A session cookie exists only inside the application you sign in to, not here.

  • No cookie is written.
  • No IP address and no browser information is recorded.
  • There is no tracking pixel, no analytics and no ad network.
  • No request is made to any third-party domain; even the fonts are served from here.
  • Unless you submit the form, no field reaches us.

PILOT REQUEST FORM

Four fields. Nothing more is asked.

Every field the form sends is listed below, and this table is the one-to-one counterpart of the database columns. Apart from submitting the form, there is no other point on this site that collects personal data.

  • Full nameHow to address the replyMadde 5/(2)(c) — pre-contractual step12 months from arrival
  • CompanyWhich business, which regime (CBAM / Türkiye ETS)Madde 5/(2)(c) — pre-contractual step12 months from arrival
  • EmailThe only reply channelMadde 5/(2)(c) — pre-contractual step12 months from arrival
  • RoleOperator or verifier — it directs the answerMadde 5/(2)(c) — pre-contractual step12 months from arrival
  • Recorded timeThe start of the retention clock and the state of the requestMadde 5/(2)(c) — pre-contractual step12 months from arrival

No IP address, browser information or referring address is written with the form; no field value reaches the server log — only the record's id does.

This is a notice, not a consent form. There is no agreement checkbox and there will not be: notice is information, explicit consent is a separate legal act, and it is asked for separately only if a separate processing activity requires it.

IF YOU WRITE DIRECTLY

Email is the second channel.

If you would rather not use the form, you can write to us directly. If you send that message, what we hold is the message itself and the address you sent it from — nothing beyond that.

What
The message you wrote and the email address you sent it from
Why
To answer your request
Legal basis
Madde 5/(2)(c) — pre-contractual step
Retention
12 months from arrival

PROCESSORS AND TRANSFER

Who processes your data.

Your request is written to a record on DAHLIA's own server. The notification email announcing that it arrived is carried by an email provider.

That provider's processing location, its sub-processors and the transfer safeguards in place are documented, and reviewed again whenever they change. The assessment under KVKK Madde 9 rests on that document.

You can ask for the current detail of that assessment at ops@dahliaci.com; applications go to the same address.

RETENTION AND DELETION

Twelve months, then deleted.

The clock starts when your request reaches us and does not depend on whether it was answered. To have it deleted sooner, write to ops@dahliaci.com (KVKK Madde 7).

YOUR RIGHTS

Under KVKK Madde 11, by applying to the data controller you may:

Applications go to ops@dahliaci.com and are concluded free of charge within thirty days at the latest (KVKK Madde 13).

  1. Learn whether your personal data is processed
  2. Request information about it if it has been processed
  3. Learn the purpose and whether it is used in line with that purpose
  4. Know the third parties it is transferred to, at home or abroad
  5. Ask for correction if it is incomplete or wrong
  6. Ask for its erasure or destruction
  7. Ask that correction and erasure be notified to those third parties
  8. Claim compensation if unlawful processing causes you loss

SCOPE OF THIS NOTICE

The public marketing surface only.

Customer data inside the operator and verifier workspaces is governed by contract and documented separately. The text of the law itself sits in our repository: Law No. 6698 on the Protection of Personal Data — every article number on this page is read from there, not from a summary. The final wording of this notice is subject to legal review before production.

Back to the product