Privacy Notice
Protection of personal data
Data controller
Your personal data is processed by Associated Risk Institute as data controller under Turkish Law No. 6698 on the Protection of Personal Data.
Data collected
During registration we collect your name, e-mail, phone number, organisation and invoicing details. Your IP address and browser information are kept as technical logs.
Purpose and legal basis
Data is processed to create your registration, issue your certificate, handle invoicing and meet statutory record-keeping duties. The legal basis is the formation and performance of a contract.
Transfers
Data is shared only with the payment provider, accounting services and authorised public bodies, to the extent required by law. No transfers are made abroad.
Retention
Registration and invoice records are kept for the period required by law, then deleted or anonymised.
Your rights
Under Article 11 you may access your data, request correction or deletion, object to processing and claim compensation for damages. Requests may be sent to the address on our contact page and are answered within thirty days.