Last updated: 15 October 2026
Data controller
Paramosoft Yazılım Hizmetleri Limited Şirketi is the data controller for personal data processed through the Salus website. Istanbul Trade Registry number: 317292-5. Address: Kavacık Mahallesi, Fatih Sultan Mehmet Caddesi, Tonoğlu No: 3/4, Beykoz, Istanbul, Türkiye. You can contact us at [email protected].
This notice covers visits to salusapp.ai, requests for demos and technical documents, and related correspondence. It does not cover personal data processed within customers' own Salus deployments.
Personal data and collection methods
We do not use visitor tracking, analytics, advertising targeting or profiling on this website. Information submitted through the demo form is delivered by email to [email protected]. We do not maintain a separate database for these enquiries. Requests and related correspondence are stored in our Google Workspace mailbox.
Forms and email correspondence provide us with your name, work email address, organisation, use case of interest and any messages you send. These data are collected electronically through automated or partly automated means. If you indicate marketing preferences, we also process your choices and consent records. When you connect to the website, technical information such as your IP address, access time, requested page and browser information is processed by the hosting infrastructure to deliver the website and secure the connection.
Our forms do not request customer records, identity documents, financial account details or special categories of personal data. Please do not include such information in your enquiry.
Purposes and legal grounds
- We process contact and enquiry details to assess and respond to demo, technical document and information requests and to send requested materials. The legal ground is our legitimate interest in responding to enquiries, provided this does not prejudice your fundamental rights and freedoms, under Article 5(2)(f) of Turkish Personal Data Protection Law No. 6698 (KVKK).
- Where processing is necessary to enter into or perform a contract to which you are personally a party, we rely on Article 5(2)(c). Enquiries made as an employee or representative of a company are managed under Article 5(2)(f).
- We process technical data necessary to deliver the website, secure connections and prevent misuse under Article 5(2)(f).
- Data necessary to respond to statutory requests and lawful requests from competent authorities are processed under Article 5(2)(ç). Records necessary to establish, exercise or protect a right in a dispute are processed under Article 5(2)(e).
- Using your contact details to send Salus promotions, product announcements and event invitations requires your separate, optional marketing permission. The legal ground for this processing is your explicit consent under Article 5(1). Requesting a demo or document does not, by itself, constitute marketing consent.
Recipients and disclosure purposes
Enquiries are handled by authorised Paramosoft personnel who need access to perform their duties. We use Cloudflare to deliver and secure the website and Google Workspace to transmit and store emails and manage correspondence. Demo form notifications and request confirmation emails are sent through Resend. These providers process the personal data necessary to deliver their services. Where required by law, relevant information may be disclosed to competent public authorities and courts. Commercial electronic message consent and withdrawal records are reported to Türkiye's Message Management System (İYS) as required by applicable legislation.
Processing outside Türkiye
We use Google Workspace for email correspondence, Cloudflare for website delivery and security, and Resend to send demo form emails. These services may involve processing contact and technical connection data on systems outside Türkiye. Enquiries and correspondence are stored in the Google Workspace email infrastructure.
Retention and deletion
We retain enquiries and correspondence for as long as necessary to assess and follow up on the request. Once the processing purpose ends and no other legal ground requires retention, the data are deleted, destroyed or anonymised. Records needed for legal obligations or disputes are retained only for the relevant purpose and period.
If you withdraw marketing permission, your information will no longer be used for new marketing communications. Commercial electronic message consent records are retained for three years after the consent ceases to be valid. Other records relating to commercial electronic messages are retained for three years from the date of the record. These records are retained to fulfil a legal obligation under Article 5(2)(ç). Limited records necessary to honour your opt-out or protect a right may be retained only for the relevant purpose and legal ground.
Your rights and requests
Under Article 11 of the KVKK, you have the right to learn whether your personal data are processed; request information about processing; learn its purpose and whether the data are used accordingly; know the third parties to whom data are transferred within or outside Türkiye; request correction of incomplete or inaccurate data; request deletion or destruction when the conditions under Article 7 are met; request notification of corrections and deletion or destruction to recipients; object to a result against you arising exclusively from automated analysis; and seek compensation for damage caused by unlawful processing.
You may submit a written request to the company address above or email [email protected] from an email address you have previously provided to us and that is held in our records. Other application methods available under the Communiqué on the Principles and Procedures for Requests to the Data Controller remain available.
A KVKK request should include your name and surname; your signature if submitted in writing; your Turkish identity number if you are a Turkish citizen, or your nationality and passport number or identity number, if any, if you are a foreign national; your address for service; your email address, telephone and fax number for notifications, if available; and the subject of your request. These details are required for the statutory request procedure, not for the general demo form.
We may request proportionate additional verification where necessary. We do not routinely request copies of identity documents. Requests are addressed as soon as possible and within 30 days, generally free of charge. If handling a request incurs an additional cost, the tariff set by the Personal Data Protection Board may apply.