Privacy Policy
Last updated:
This notice is published by Chemoris (“Chemoris” or “we”) as data controller under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), to inform people who use chemoris.com and its services about how their personal data is processed.
1. Data controller
The data controller is Chemoris. You can send requests and questions about your personal data through the form on the Contact page by choosing the topic “Data protection request”.
2. Personal data we process, purposes and legal grounds
| Category | Data | Purpose | Legal ground | Retention |
|---|---|---|---|---|
| Identity and contact (account) | Name, e-mail address, phone number | Creating the account, signing in, providing the service | Performance of a contract (KVKK 5/2-c) | Until the account is closed |
| Customer transactions | The SDS forms you save, product and company details, company logo | Preparing, storing and downloading SDSs | Performance of a contract (KVKK 5/2-c) | Until you delete them or the account is closed |
| Credits and purchases | Your credit balance, credit movements (top-ups, usage) and related notes | Assigning credits and tracking their use, invoicing | Performance of a contract (KVKK 5/2-c); legal obligation (KVKK 5/2-ç) | Until the account is closed; invoices and commercial records for the legal period |
| Requests and complaints | E-mail, name, phone, company and message sent through the contact form or WhatsApp | Replying to you, package and purchase discussions, reviewing bugs and suggestions | Legitimate interest (KVKK 5/2-f) | Until the request is resolved |
| Contact permission (given at sign-up) | E-mail address, phone number, name, consent date and consent text version | Sending account, service, product-update and announcement messages by e-mail, SMS and phone | Explicit consent (KVKK art. 5/1; Law no. 6563); commercial-message consent can be withdrawn at any time in your profile | Until consent is withdrawn |
| Transaction security | An encrypted digest of your IP address | Free demo and form usage limits, preventing abuse | Legitimate interest (KVKK 5/2-f) | 31 days |
| SDS Check (document check) | Findings; the CAS numbers and percentages of the components; file digest (sha256); check counter and time of use | Providing the check report, preventing abuse, usage statistics and a follow-up e-mail about your use | Performance of a contract (KVKK 5/2-c); legitimate interest (KVKK 5/2-f) | Findings 90 days; CAS and percentage list 7 days or until the “fix” link is used; file digest, counter and time of use until the account is closed |
If you enter other people's details in an SDS (for example the contact details of the person who prepared it), informing them is your responsibility. Substance look-ups send only the CAS number to ECHA.
Commercial electronic message permission
By accepting this text when you sign up, you allow us to inform you about your account, the service and product updates by e-mail, SMS and phone. You can withdraw this permission at any time from your profile page or the Contact page (Law No. 6563); withdrawing it does not affect your account.
SDS Check tool
The file you upload to SDS Check is never written to disk; it is held in memory only while it is analysed and discarded from memory right after the analysis. The text of the document, the product name and company and personal details are not stored; the data listed in the table above is stored. For checks made without signing in, the findings are kept for 24 hours. You can request deletion of this data through the application channel in section 9.
The SDS Check report is for information only; it does not replace the assessment of an expert.
3. How we collect data
Your data is collected electronically through the forms on the site (sign-up, SDS wizard, profile and contact).
4. Transfers of personal data
We use the service providers below to run the service. Because their servers are located outside Türkiye, the data listed is transferred abroad within the scope of Article 9 of the KVKK.
| Provider | Service | Location | Data transferred |
|---|---|---|---|
| Google Firebase Authentication | Account creation, sign-in and e-mail verification | Abroad (Google) | Name, e-mail, password |
| Brevo | Sending account e-mails (password reset, e-mail verification) | Abroad (Brevo, France) | E-mail address and the content of the message sent (including the link) |
| Oracle Cloud Infrastructure | Hosting, database and backups | Germany (Frankfurt) | SDS forms, logos, phone number, contact messages |
| Cloudflare | Serving the site securely and quickly, visit statistics | Abroad (Cloudflare) | IP address and browser details |
| WhatsApp (Meta) | Optional: package and purchase conversations | Abroad (Meta) | Your phone number and the messages you write (only if you message us on WhatsApp) |
Your personal data is not sold and is not shared with third parties for advertising. It may be disclosed to authorised public bodies on request, to the extent required by law.
5. Cookies
The site uses a single technical cookie that remembers your language; your sign-in state is kept in your browser. Visits are counted without cookies and without identifying you. No advertising or tracking cookies are used.
6. Retention and deletion
Data is kept for the periods given in the table above. You can delete your forms at any time and request closure of your account through the contact form. Backups are deleted after 30 days at the latest.
7. Data security
The site is served only over an encrypted connection (HTTPS); Chemoris cannot see your password, and each account's forms can be accessed only by the account holder.
8. Your rights under Article 11 of the KVKK
By applying to the data controller you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties in Türkiye or abroad to whom your data is transferred,
- request correction if your data is incomplete or inaccurate,
- request deletion or destruction of your data under the conditions of Article 7 of the KVKK,
- request that corrections, deletions or destructions be notified to the third parties your data was transferred to,
- object to a result against you arising from analysis of your data exclusively by automated systems,
- claim compensation if you suffer damage because your data was processed unlawfully.
9. How to apply
Send requests through the form on the Contact page, choosing the topic “Data protection request” and stating your name and the e-mail address linked to your account. Requests are resolved free of charge within 30 days at the latest.
Make a data protection request
10. Changes
This notice is updated when needed; the current version and its date are on this page.