Back to Home

Explicit Consent for Cross-Border Data Transfer

Version 1.0.0 | Effective: 3/3/2026

EXPLICIT CONSENT STATEMENT FOR CROSS-BORDER DATA TRANSFER

EXPLICIT CONSENT STATEMENT REGARDING THE TRANSFER OF PERSONAL DATA ABROAD ON THE TESTOMATIK PLATFORM

Effective Date: 03.03.2026

Pursuant to Article 9 of the Personal Data Protection Law No. 6698 ("KVKK"), your explicit consent is required for the transfer of your personal data abroad.

1. PURPOSE OF DATA TRANSFER

The technical infrastructure and artificial intelligence services of the TESTOMATIK platform are provided through service providers located abroad. In this context, your personal data may be transferred abroad for the purpose of providing the Platform's services.

2. DATA TO BE TRANSFERRED

  • Identity information (first name, last name, e-mail address)

  • Platform usage data and statistics

  • The document content you upload (for the purpose of question generation)

  • Payment and invoicing information

    • 3. RECIPIENT SERVICE PROVIDERS

  • Supabase (USA): Database and authentication - SOC 2 Type II, HIPAA

  • OpenAI (USA): AI question generation - SOC 2 Type II

  • Anthropic (USA): AI question generation - SOC 2 Type II

  • Resend (USA): E-mail delivery service - SOC 2 Type II

  • Vercel (USA): Web hosting and CDN - SOC 2 Type II, ISO 27001

    • 4. SECURITY MEASURES

  • Encryption: All data is transferred over channels encrypted with SSL/TLS

  • Access control: Only authorized systems can access your data

  • Data minimization: Only the data necessary for the service is transferred

  • Contractual safeguards: Data processing agreements have been signed with all service providers

    • 5. YOUR RIGHTS

    Under Article 11 of the KVKK:

  • You may withdraw your explicit consent at any time

  • Withdrawal of consent does not affect the lawfulness of processing carried out up to the moment of withdrawal

  • If consent is withdrawn, certain services that require the transfer of data abroad may not be available

    • 6. APPLICATIONS

    To withdraw your explicit consent or for your questions: [email protected]

    ---

    This statement has been prepared for the purpose of obtaining explicit consent for the transfer of data abroad under Article 9 of the KVKK.

    Last Updated: 03.03.2026