ONKASAN ELEKTRONIK SANAYI VE TICARET LIMITED SIRKETI
PRIVACY POLICY
As Onkasan Elektronik Sanayi ve Ticaret Limited Sirketi (“Onkasan” or “Company”), we attach the highest level of importance to your privacy across both our official website (onkasanelektronik.com.tr) and our mobile application (Onkasan) where you manage our smart home and industrial automation (Garden Irrigation, Lighting, etc.) systems.
This Privacy Policy explains which security technologies protect the data you share when using our digital platforms, the limitations of our technical infrastructure, and the administrative and technical measures we take to ensure the privacy of your data. This text is in full integration with our company's KVKK compliance policies (Law No. 6698) and technical architecture.
1. OUR DATA SECURITY AND CRYPTOLOGY STANDARDS
The security of the data entrusted by our users to our systems is ensured by applying the most up-to-date and strict standards of the cybersecurity world:
- Password Security (One-Way Cryptography): User passwords created when registering for the mobile application or website are never saved in our database as plain-text. Your passwords are stored by masking them with strong one-way cryptographic algorithms (hashing) that cannot be reversed. Thanks to this structure, no one, including Company personnel and system administrators, can view, access, or read your passwords in plain text.
- Sensitive Data Encryption (AES-256-GCM): Other sensitive personal and system data stored in our database is encrypted using the AES-256-GCM (Advanced Encryption Standard - 256 bit - Galois/Counter Mode) algorithm, which is one of the highest globally accepted encryption standards. In this way, even in the event of a physical or digital cyber attack on the database, your data is protected with armor that renders it completely unreadable and uncompromisable.
2. DATA STORAGE LOCATION AND DOMESTIC BOUNDARY
Onkasan strictly adheres to the principle of localization of user data:
- The identity and contact information (name, surname, email address, phone number) of our application and website users are hosted exclusively on local servers owned by our Company within the borders of Turkey.
- This data is kept in a secure MSSQL (Microsoft SQL Server) database infrastructure, isolated from external cyber threats and subjected to strict access protocols.
- No personal information directly or indirectly identifying our users is ever transferred abroad, backed up, or stored on servers located outside of Turkey.
3. USE OF GOOGLE FIREBASE AND TECHNICAL DATA SEPARATION
In order to control smart automation devices (lighting fixtures, garden irrigation valves, etc.) instantly via the internet from anywhere in the world and track their status, we utilize Google Firebase (Realtime Database & Cloud Messaging) services. However, an absolute technical data separation has been implemented in this integration to protect your privacy:
- Personal Data Prohibition: No personal identity data such as your name, surname, email address, or phone number is ever sent to or kept on the Google Firebase infrastructure.
- Anonymous Technical Data Flow: Only purely technical and anonymous data necessary for devices to receive remote commands is transmitted to foreign-sourced cloud services. The data hosted on Firebase only consists of: device serial number (SSID / Device ID), instantaneous status of relays (e.g., valve or light on/off info), and online/offline signals indicating whether the device is connected to the internet.
- Thanks to this technical architecture, even if third-party cloud providers process the technical data in their hands, they can never technically determine which real person this data belongs to in the background.
4. COOKIE POLICY
The use of cookies on our website (onkasanelektronik.com.tr) is limited only to ensure the stable and secure operation of the system:
- Mandatory and Technical Cookies: Only mandatory cookies are used on our site to improve user experience, remember your language preferences, optimize site navigation, and ensure secure session management (verification of login transactions).
- Third-Party and Tracking Cookies: No third-party advertising, marketing, tracking, or analytical cookies that monitor, profile, or target advertisements based on users' activities on the internet are used on Onkasan digital platforms.
5. PROHIBITION OF DATA SHARING, SALE, AND LEASING
One of the most fundamental privacy principles of our Company is to strictly refuse turning user data into a commercial commodity:
- Your personal data collected and stored encrypted on our local servers, as well as your device usage statistics, are never disclosed, sold, rented, or shared with any third-party real person, private institution, or organization for commercial, advertising, marketing, external analysis, or profiling purposes.
- Your data can only be shared with authorized public institutions and organizations (courts, police units, judicial authorities, etc.) in accordance with the legislation in force and limited only to the relevant authority, in order to fulfill our legal obligations when requested through official channels.
6. RIGHT OF ACCESS AND COMMUNICATION
Our Privacy Policy reserves your right to control your data. You can contact us at any time to request the deletion or updating of your data, or to request more detailed information about our security infrastructure.
- Company Title: Onkasan Elektronik Sanayi ve Ticaret Limited Sirketi
- Address: Serhat Mh. 1123. Cd. No: 3/24 Yenimahalle / Ankara / Turkey
- Email: info.onkasan@gmail.com
- Phone: +90 533 352 93 41
This Privacy Policy is accepted as a mutual trust agreement from the moment you start using Onkasan platforms. Onkasan reserves the right to make changes to this notice to adapt to developing cybersecurity technologies and legal regulations.