Privacy Policy and Personal Data Protection Notice

1. Data Controller

• Data Controller: AlgoSense OÜ (private limited company established in Estonia)
• Registry code: 17049743 (Estonian Commercial Register)
• VAT number: EE102864005
• Address: Ahtri tn 12, 15551 Tallinn, Estonia
• Website: www.algosense.ai
• Contact: info@algosense.ai

2. What Personal Data Do We Process, From Whom, and Through Which Channels?

Algosense operates a corporate website for promotional purposes. The Site offers no membership, account creation, online forms or financial transactions. Our personal data processing activities, by category of data subject, are as follows:

a) Site Visitors

When you visit the Site, Algosense does not collect or record any personal data that could identify you (IP address, name, e-mail, device identifier, etc.). Site usage is measured only as daily total visits, unique visitor counts, and total page-view and link-click counts for certain pages — entirely anonymous, unrelated to identity, and only if you give permission via the cookie preferences banner. For details about the limited data stored on your device (such as your language preference), please see the Cookie Notice. No third-party advertising, marketing or analytics tracking tools are used on the Site.

b) Persons Contacting Us by E-mail (info@algosense.ai)

There is no contact form running on the Site. When you send us an e-mail, we process your identity data (name, surname), contact data (e-mail address, and telephone number if you share it) and any other information you include in your message (company, title, subject of your request).

• Purposes: Responding to your requests and questions, evaluating demo/introduction requests, and conducting discussions aimed at establishing a business relationship.
• Legal grounds: Article 6(1)(b) GDPR (steps prior to entering into a contract or performance of a contract) and Article 6(1)(f) GDPR (legitimate interest of the data controller); for data subjects located in Türkiye, additionally Articles 5/2-c and 5/2-f KVKK.

c) Job Applicants (info@algosense.ai)

Job applications are received by e-mail. In your application we process your identity and contact data, education and professional experience data, and any other information you choose to include in your CV.

• Purposes: Evaluating your application for the relevant position, contacting you, and conducting recruitment processes.
• Legal grounds: Article 6(1)(b) GDPR (taking steps towards the conclusion of an employment contract) and Article 6(1)(f) GDPR; for data subjects located in Türkiye, additionally Articles 5/2-c and 5/2-f KVKK.
• Important: Please do not include special categories of personal data (health, association/foundation/union membership, religion, criminal convictions, etc.) in your CV; such data is not taken into account in the evaluation.

d) Site Administrator Accounts (internal)

The Site's content is managed exclusively through administrator accounts authorized by Algosense; in this context, administrators' authentication and session data are processed. Visitors cannot create accounts.

3. How Personal Data Is Collected

Your personal data is collected by fully or partially automated means through e-mail communication and, within the scope of the Site's technical operation, electronically through the Site's infrastructure.

4. Transfer of Personal Data

• Your personal data is never sold, rented or transferred to any third party for advertising, marketing or data-trading purposes.
• The Site's hosting and database infrastructure runs on Google Firebase (Google LLC, USA); data within the scope of the Site's operation is processed on this infrastructure provider with the necessary technical and administrative measures in place. This transfer outside the European Economic Area is based, under Chapter V GDPR, on Google's certification under the EU-U.S. Data Privacy Framework and on the European Commission's Standard Contractual Clauses; for data subjects located in Türkiye, appropriate safeguards under Article 9 KVKK are observed. E-mail correspondence is stored on Algosense's corporate e-mail infrastructure.
• Your personal data may be transferred to legally authorized public institutions and organizations upon request, within the scope of fulfilling our legal obligations.

5. Retention Periods

Your personal data is retained for as long as required by the purpose of processing, subject to the statute-of-limitations periods in the applicable legislation:

• Contact correspondence: For a reasonable period following the resolution of your request.
• Job applications: For the duration of the evaluation process for the position applied for; for unsuccessful applications, for a maximum of twelve (12) months so that you can be considered for suitable future openings, after which the data is deleted or destroyed.
• Anonymous statistics: Not subject to a time limit, as they do not constitute personal data.

Personal data whose retention period has expired is deleted, destroyed or anonymized.

6. Data Security

Algosense takes the technical and administrative measures necessary to ensure an appropriate level of security in order to prevent unlawful processing of and unlawful access to personal data, and to ensure its preservation. In this context: Site traffic is carried over encrypted connections (HTTPS), database access is restricted through role-based authorization and access rules, the administration panel is accessible only with authorized accounts and from restricted networks, and the data-minimization principle is observed.

7. Your Rights as a Data Subject

Under Articles 15 to 22 GDPR, you have the right to: access your personal data and obtain a copy of it; have incomplete or inaccurate data rectified; request erasure ("right to be forgotten") or restriction of processing under certain conditions; receive your data in a structured, machine-readable format (data portability); object to processing based on legitimate interest; not be subject to decisions based solely on automated processing; and, where processing is based on consent, withdraw your consent at any time (withdrawal does not affect the lawfulness of prior processing). You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority of the EU Member State of your habitual residence. Data subjects located in Türkiye additionally have the rights listed in Article 11 KVKK and may lodge a complaint with the Turkish Personal Data Protection Board.

8. How to Apply

You may submit requests regarding your rights to info@algosense.ai. In accordance with Article 12 GDPR, your request will be answered free of charge without undue delay and in any event within one (1) month; where necessary, taking into account the complexity and number of requests, this period may be extended by two (2) further months, in which case you will be informed. Requests under KVKK from data subjects located in Türkiye are concluded within thirty (30) days at the latest, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

9. Changes

Algosense reserves the right to update this notice in line with changes in legislation and in its data processing activities. The current version is published on the Site together with its publication date.