Rencontrons-nous à un horaire qui vous convient

Explicit Consent Statement for Processing Personal Data in Connection with a Demo Request

This Demo Consent Statement (the "Statement") is displayed on the heyAtlas demo request form, above the mandatory consent box. Information under Law No. 6698 on the Protection of Personal Data (the "KVKK") is provided in a separate document, the Personal Data Processing Notice (the "Notice"); this Statement only sets out the subject matter and limits of your explicit consent.

1. Data Controller

1.1. «SAĞLAYICI UNVANI» (the "Provider" or "heyAtlas") · Address: «SAĞLAYICI ADRESİ» · MERSIS No: «MERSİS NO» · Tax Office and No: «VERGİ DAİRESİ VE NO» · Registered E-mail (KEP): «KEP ADRESİ» · E-mail: hello@heyatlas.net

2. Data, Purposes and Retention Period

2.1. The full name, business e-mail address, company, team size, telephone number, message and appointment time you provide on the form, and the IP address, browser information, language preference and consent records captured when the form is submitted (the "Demo Request Data"), are processed.

2.2. The Demo Request Data are processed for the purposes of receiving, assessing and responding to your request; scheduling the appointment and sending the meeting invitation; preparing a proposal at your request; preventing misuse of the form; and evidencing consent records.

2.3. The Demo Request Data are retained for no longer than 2 years from the date of the request and are then erased, destroyed or anonymised. Records required by a statutory retention obligation or a dispute may be retained for as long as that ground requires.

3. Legal Grounds and Scope of Explicit Consent

3.1. The processing required to receive, assess and respond to your request is based not on explicit consent but on its direct relation to the establishment of a contract (KVKK Art. 5(2)(c)), on the Provider's legitimate interest in responding to your request and securing the form (KVKK Art. 5(2)(f)) and, as regards records, on the establishment, exercise or protection of a right (KVKK Art. 5(2)(e)).

3.2. Your explicit consent relates solely to the transfer of the Demo Request Data, in accordance with Section 4, to service providers located abroad that are used to process the request. It is not a general consent to any other processing and does not replace consent to receive commercial electronic messages.

3.3. The statement in the consent box that you consent to the processing of your data for this request shall be construed as explicit consent given to the transfer described in 3.2. The statement in the box that you have read the privacy notice only confirms that the Notice has been provided to you separately; it does not form part of your explicit consent.

4. Transfer Abroad and Possible Risks

4.1. The heyAtlas website and the demo request system run on the infrastructure of service providers located abroad; a request submitted through the form cannot be processed without that infrastructure. The recipients as at the publication date of this Statement are listed below; the current list is in the Notice.

• Database: Neon (Germany)
• Web hosting: Vercel (servers in Germany, company headquartered in the USA)
• Application server and encrypted backups: Hetzner Online (Germany and Finland)
• E-mail, calendar and meetings: Microsoft (EU); for outgoing e-mail, Amazon Web Services (Germany)
• Bot protection and content delivery (where used): Cloudflare (global network, including the USA)

4.2. The transfer is subject to KVKK Art. 9. Where an adequacy decision or one of the appropriate safeguards listed in KVKK Art. 9(4) exists, the transfer is based on it; where none exists, it is based on the exceptions in KVKK Art. 9(6), subject to the conditions laid down therein. Your explicit consent is one of those exceptions (Art. 9(6)(a)) and applies only to the extent that the transfer cannot be based on another mechanism.

4.3. The possible risks are as follows: the recipient country may not have data protection rules or an independent supervisory authority equivalent to those in Türkiye; it may be more difficult for you to exercise your rights and to obtain effective redress there; public authorities of that country may access the data under their own laws; and data security also depends on infrastructure that is not under the Provider's direct control. The Provider's measures, such as encryption and access restriction, reduce the risks but do not eliminate them.

5. Nature and Withdrawal of Consent

5.1. You are not obliged to give explicit consent; however, since the form runs on the infrastructure described in 4.1, it cannot be submitted without explicit consent. You may also submit your request in writing to the postal or KEP address set out in Section 1; such a request will be assessed by means that do not require a transfer abroad or to the extent permitted by the other mechanisms described in 4.2.

5.2. You may withdraw your explicit consent at any time, without giving reasons, by notifying hello@heyatlas.net or through one of the application channels set out in the Notice. Withdrawal has effect for the future only and does not affect the lawfulness of prior processing.

5.3. Upon withdrawal, the transfer based on explicit consent ceases and, since your request cannot be processed without the infrastructure described in 4.1, it may be closed. Unless another legal ground and transfer mechanism exists, the data are erased or anonymised within 30 days at the latest and are removed from backups through the ordinary cycle within 60 days at the latest.

6. Other Provisions

6.1. The explicit consent under this Statement is not a basis for sending commercial electronic messages; that consent is given through the separate, optional box on the form under the Commercial Electronic Message Consent, and not giving it does not affect your demo request.

6.2. Your rights under KVKK Art. 11 and the application procedure are set out in the Notice.

6.3. When the form is submitted, the version of this Statement displayed to you is recorded together with your request; your explicit consent is assessed according to that version.

Version: 2 · Published: 27 Sept 2026

Commercial Electronic Message Consent

This Commercial Electronic Message Consent (the "Consent Statement") is displayed, pursuant to Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communications and Commercial Electronic Messages, on the demo request form on the heyAtlas website, immediately above the optional consent box. By ticking the box, you agree to receive the commercial electronic messages described in this Consent Statement (the "Consent").

1. Sender

1.1. «SAĞLAYICI UNVANI» (the "Provider" or "heyAtlas") · Address: «SAĞLAYICI ADRESİ» · MERSIS No: «MERSİS NO» · Tax Office and No: «VERGİ DAİRESİ VE NO» · Registered E-mail (KEP): «KEP ADRESİ» · E-mail: hello@heyatlas.net

2. Scope of the Consent

2.1. The Consent covers commercial electronic messages containing promotional material and announcements relating to heyAtlas products and services, campaigns and pricing offers, invitations to events and webinars, newsletters and surveys relating to products and services.

2.2. Messages may be sent by e-mail, short message (SMS) and voice call. The Consent is valid only for the e-mail address and telephone number you provide on the form at the time of the Consent; if you have not provided a telephone number, it covers the e-mail channel only. Separate consent is obtained for any other contact address.

2.3. Messages are sent by or on behalf of the Provider, through the service providers that the Provider uses for sending messages. The Consent does not permit third parties to send you messages on their own behalf.

3. Optional Nature

3.1. The Consent is entirely optional; the box is unticked by default and the Consent is given only if you tick it. Not giving the Consent, or withdrawing it later, does not affect the receipt and assessment of, or the response to, your demo request.

3.2. Messages relating to the response to your demo request (confirmation of receipt, appointment and meeting details, and replies to the questions raised in your request) are not based on the Consent. Statutory provisions on messages that may be sent without consent are reserved.

4. Right to Opt Out

4.1. You may withdraw the Consent at any time, without giving reasons and free of charge, and refuse all messages or only those sent through a particular channel.

4.2. You may give an opt-out notice by using the opt-out link or instructions in e-mails, following the opt-out instructions in SMS messages, stating it orally during a voice call, replying to a message, writing to hello@heyatlas.net or, where provided for by law, through the Message Management System ("İYS").

4.3. An opt-out notice is processed within 3 business days at the latest from the date it reaches the Provider; from the end of that period, no commercial electronic messages will be sent to you through the channels covered by the opt-out.

4.4. Opting out does not affect your demo request or any other legal relationship between you and the Provider.

5. İYS and Record of Consent

5.1. Consents and opt-out notices are registered with İYS in the cases and within the periods provided for by law. In those cases, you may also view your Consent and exercise your right to opt out through İYS.

5.2. When the Consent is given, the version of this Consent Statement, the time of the Consent, your full name and the e-mail address and telephone number for which the Consent is given are recorded. Consent and opt-out records are retained for evidentiary purposes for the period prescribed by law.

6. Personal Data

6.1. Your contact data are processed for the purposes of sending the messages covered by the Consent and evidencing the Consent, in accordance with Law No. 6698 on the Protection of Personal Data (the "KVKK") and the Personal Data Processing Notice.

6.2. For the purposes of the KVKK, the Consent also constitutes your explicit consent to the processing of your contact data solely for the purpose of sending the messages covered by the Consent and to their transfer to e-mail, hosting and database service providers located abroad that are used for that purpose. The transfer is made principally to data centres in the EU and, depending on the service provider, may be made to countries outside the EU, including the USA; where no adequacy decision or appropriate safeguard exists, your explicit consent serves as the basis under KVKK Art. 9(6)(a). The possible risks are as follows: the recipient country may not offer protection equivalent to that in Türkiye, it may be more difficult for you to exercise your rights, and public authorities of that country may access the data.

6.3. Opting out also results in the withdrawal of this explicit consent; your contact data will no longer be processed for this purpose thereafter. The records referred to in 5.2 continue to be retained on the basis not of explicit consent but of a legal obligation (KVKK Art. 5(2)(ç)).

Version: 2 · Published: 27 Sept 2026