Privacy Policy and KVKK Disclosure Notice

Who the data controller is

The data controller for your personal data is iStar Bilişim. PolariStar is a brand of iStar Bilişim.

Address: Gürsel Mah. İmrahor Cad. No:29/A, Premier Kampüs Ofis, Kat:2, Ofis No:86, 34400 Kağıthane / İstanbul, Türkiye
E-mail: iletisim@polaristarop.com
Offices: Istanbul · Gaziantep · Baku · Ashgabat
Site: polaristarop.com · Help centre: help.polaristarop.com

What this policy covers and what it does not

This policy covers the marketing site only: viewing pages on polaristarop.com, submitting a form, and writing to us by e-mail.

It does not cover data held inside the PolariStar product. That is the point people most often get wrong, so it has a section of its own further down: see “Data inside the product is outside this policy”.

Categories of personal data

The data below reaches us when you fill in a form or write to us.

Category	Contents	Source
Identity	First and last name	Contact and demo request form
Contact	Work e-mail address, phone number (optional)	Contact and demo request form
Professional	Your organisation, your role in it	Contact and demo request form
Request details	Your message, the need you describe, employee or device count range	Contact and demo request form
Correspondence	The content of e-mail you send us and the sending address	Direct e-mail

We do not ask for special categories of personal data (health, biometrics, religion, union membership and the like). Please do not put such details in the message field.

How we collect it

Site forms: the contact form and the demo request form. You fill in the fields and tick the consent box yourself.
Direct e-mail: the links on the site open your own mail program addressed to iletisim@polaristarop.com.
Technical requests: the requests your browser makes to display the pages. We set no cookies, run no analytics and embed no advertising trackers. The only external source is Google Fonts, described below.

For the detail, see our Cookie Policy.

Why we process it

To read the request you sent and reply to you.
To arrange a demo session and show you the product.
To prepare a commercial proposal and hold pre-contract discussions.
To keep track of your request, so we have the history if you write again about the same matter.
To respond to a lawful request from a competent authority.

We do not sell your data, do not share it for advertising and do not profile you.

Legal grounds (KVKK Article 5)

Explicit consent — Art. 5/1. The consent you give by ticking the box on the form. You can withdraw it at any time; the withdrawal takes effect when it reaches us.
Establishment or performance of a contract — Art. 5/2-c. Preparing a proposal and holding pre-contract discussions relate directly to the contract we may sign.
Legitimate interest — Art. 5/2-f. Recording and answering business enquiries is a legitimate interest of ours, to the extent it does not harm your rights.
Legal obligation — Art. 5/2-ç. Answering a properly made request from a competent public authority.

Who we share it with

We do not share form submissions or correspondence with third parties. The exceptions are:

Our e-mail infrastructure. Form submissions and messages travel through our corporate e-mail service and are stored on its servers.
Competent public authorities. Only on a properly made request, and only within its scope.

For visitors who merely read the pages, nothing is transferred apart from the Google Fonts request.

Transfers abroad

We would rather be straight about this, because claiming that no data ever leaves the country would not be true.

Google Fonts. The site’s typeface (Outfit) loads from fonts.googleapis.com and fonts.gstatic.com. That means your browser sends a request to Google, and with it Google receives your IP address along with standard request details such as browser type and the address of the page you are viewing. We set no cookie through that request and we have no access to that data. How Google handles it is set out in the Google Privacy Policy.
E-mail infrastructure. Our corporate e-mail runs on our own server in Türkiye. Your form and message contents are not transferred abroad through a third-party e-mail service.

Beyond these we do not transfer personal data abroad.

Storage and retention

Form submissions are stored on a server located in Türkiye and are also forwarded by e-mail to iletisim@polaristarop.com.
If your request is not taken forward, or the conversation ends without a result, the record is deleted after 12 months.
If a customer or prospective customer relationship begins, records are kept for the period required by the applicable legislation, then deleted or anonymised.
If you withdraw consent or ask for deletion, the record is deleted to the extent no legal ground requires us to keep it.

Security

Under Article 12 of the KVKK we take appropriate technical and administrative measures against unlawful access to and disclosure of the data we process: access is limited to people who need it for their work, we do not collect data we do not need, and we delete records once their retention period ends.

We do not promise absolute security, because no transmission over the internet can guarantee it. If we identify a security incident, we make the notifications the law requires.

Data inside the product is outside this policy

The PolariStar panel runs on the customer organisation’s own server, or in an environment that organisation chooses. The data held in the panel — requests, device inventory, user records, network details — belongs to that organisation.

For that data the data controller is the customer organisation, not iStar Bilişim.
If you are an employee or an end user and have a request about data held in the panel, the right address is not this site but your own organisation’s IT or data protection contact.
Where iStar Bilişim or a partner operates the deployment, the scope of that service and the roles of each party are set out in the agreement signed with that organisation.

In other words, this policy does not replace the obligations a customer organisation owes to its own users.

Your rights under KVKK Article 11

Under Article 11 of the KVKK you may apply to us to:

Learn whether your personal data is processed.
Request information about the processing, if it has taken place.
Learn the purpose of the processing and whether the data is used in line with that purpose.
Know the third parties, in Türkiye or abroad, to whom the data has been transferred.
Ask for correction if the data is incomplete or inaccurate.
Ask for erasure or destruction of the data under the conditions in Article 7.
Ask that any correction, erasure or destruction be notified to the third parties the data was transferred to.
Object to a result reached to your detriment solely through automated analysis of the data.
Claim compensation if you suffer damage because the data was processed unlawfully.

You may also withdraw the consent you gave on the form at any time.

How to apply and how long it takes

To exercise these rights, send your request:

In writing to: Gürsel Mah. İmrahor Cad. No:29/A, Premier Kampüs Ofis, Kat:2, Ofis No:86, 34400 Kağıthane / İstanbul, Türkiye
By e-mail to: iletisim@polaristarop.com

Please include enough information for us to identify you and state your request clearly. We use that information only to assess the application.

We conclude requests as soon as possible and within 30 days at the latest. There is normally no charge; if the request requires an additional cost, the fee in the tariff set by the Turkish Personal Data Protection Board may apply.

Complaints to the Board

If your application is refused, our answer is insufficient, or no answer arrives in time, you may complain to the Turkish Personal Data Protection Board under Article 14 of the KVKK. The law sets a period of thirty days from learning of our answer and, in any case, sixty days from the date of your application. Your right to go to court remains in all cases.

Changes and contact

We update this page whenever the site or the way we handle data changes. The “last updated” date above always reflects the version in force.

Questions: iletisim@polaristarop.com