KVKK Privacy Notice | Hub Genetik

This English text is a courtesy translation provided for information only. In case of any discrepancy, the Turkish version prevails.

1. Data Controller

Pursuant to Personal Data Protection Law No. 6698 ("KVKK", Turkey's personal data protection law), your personal data is processed by the following company in its capacity as data controller:

Company name: Hub Gen Bilişim ve Teknoloji A.Ş.
Address: Üniversiteler Mah. 1597. Cad. Dış Kapı No: 3, İç Kapı No: 104, Ofis No: 414, Çankaya / Ankara
MERSIS No. (Turkish Central Registration System): 0464217209500001
Trade Registry No.: 537487 (Ankara Chamber of Commerce)
Email: info@hubgenetik.com
Phone: 0531 281 65 38

2. Personal Data Processed

Identity and contact: First name, last name, email, phone number, delivery/billing address.
Order and transaction: Order history, invoices, payment confirmation records. (We do not store your card details; payment is made through the infrastructure of iyzico, a licensed payment institution.)
Special category — genetic and health data: Genetic analysis results obtained from the sample. This is special category personal data under Article 6 of the KVKK and is processed only with your explicit consent.
Digital data: Cookie and traffic data relating to your use of the website.

3. Purposes of Processing

Providing the genetic analysis service and preparing and delivering the report,
Carrying out order, payment, invoicing and delivery processes,
Responding to customer support and contact requests,
Fulfilling legal obligations,
With your explicit consent, informational and marketing communications.

4. Special Principles for Genetic Data

Genetic data is processed only with your explicit consent and only to the extent required by the service.
Without your explicit consent, your data is never shared with, sold or rented to third parties (insurers, employers, advertising networks, etc.).
Samples and genetic data are processed separately from your identity (coded); access is limited to authorized personnel.
You may withdraw your explicit consent at any time and request the deletion of your data (subject to legal retention obligations).

5. Transfer of Personal Data

To the extent strictly necessary for performing the service, your data may be shared with the contracted analysis laboratory, the courier/logistics company, the payment institution (iyzico) and hosting/infrastructure providers (Shopify), in compliance with Articles 8 and 9 of the KVKK and with the necessary safeguards in place. For transfers abroad, the conditions set out in the KVKK are complied with.

6. Data Retention Period

Your data is retained for as long as required by the purpose of processing and for the statutory retention periods under the applicable legislation; at the end of that period it is deleted, destroyed or anonymized. Your genetic data is retained for as long as your explicit consent remains valid and for the minimum statutory periods required by the applicable legislation; if you withdraw your explicit consent, it is deleted, except where legal retention obligations apply.

7. Your Rights under the KVKK (Article 11)

You have the right to learn whether your personal data is being processed, to request information, to learn the purpose of processing, to request its correction, to request its deletion where the conditions are met, to request that such actions be notified to third parties, to object to a result against you arising from automated analysis, and to request compensation for damages. You can send your requests to info@hubgenetik.com; your applications are concluded within 30 days at the latest.

8. Data Security

To keep your data secure, appropriate technical and administrative measures are applied, including SSL encryption, access authorization, coding/pseudonymization and regular security audits.

Privacy and KVKK Privacy Notice