Privacy Policy

This Privacy Policy covers the personal data we collect through the incuba.tr website operated by INCUBA KLİNİK ARAŞTIRMA TEKNOLOJİLERİ ANONİM ŞİRKETİ ("Incuba"). Products under the Incuba umbrella (such as Clinno and contrac.tr) publish their own separate privacy policies on their own websites.

The controller's identity details (legal name, address, MERSIS) are in the KVKK Disclosure Notice.

The only place on this site where we collect personal data is the contact form. Through it, we process:

• Full name
• Email address
• Organization (if you provide it)
• The content of your message

Our servers and our network security provider also keep technical logs (IP address, request time, browser information) for security and error tracking.

Please do not include health data, patient information or other special category data in your message.

We use the data you submit only for the following purposes:

• Responding to your message and evaluating your inquiry
• Connecting you with the relevant product or service team based on the nature of your inquiry
• Meeting our legal obligations

Data submitted through the contact form is kept for at most 2 years after your inquiry has been evaluated if it does not lead to a contract, or for the statutory retention periods if it does, after which it is deleted or anonymised.

Server logs are kept for at most 90 days and deleted automatically when that period ends.

The site is hosted on our own servers in Ankara, Türkiye. Form content is not stored in a database; it is delivered by email. We share your data only with the providers below, which process it on our behalf as data processors.

We do not share your data with third parties unless required by law or requested by a competent authority.

Cloudflare, Inc.

Encrypted connections (HTTPS), network security and protection against attacks. Traffic to the site, including form submissions, passes through the Cloudflare network. Based in the United States, global infrastructure.

Microsoft Ireland Operations Limited

Delivery of form content to our corporate mailbox and storage there (Microsoft 365).

Our servers are in Türkiye, but because these providers operate infrastructure abroad, your data may be processed outside Türkiye. Transfers are made under Article 9 of KVKK.

A detailed list of your rights regarding your personal data under Turkish law is set out in the KVKK Disclosure Notice. You can contact us at the address below to exercise your rights.

We take reasonable technical and administrative measures to protect your personal data against unauthorized access, loss, or misuse. That said, no transmission or storage over the internet can be guaranteed to be completely secure.

We may update this policy. The current version is always published on this page, and the effective date is noted below the title.

For questions about this policy, you can write to [email protected].