Privacy Policy

1. Data Controller

The data controller for your personal data is CyberPath Bilisim Yazilim Uretimi Egitim Danismanlik Ticaret A.S.. You can reach the data controller through the following channels:

2. Personal Data Collected

The following personal data may be collected through the Platform:

2.1 Identity and Contact Information

• Full name
• Email address
• Password (stored in encrypted/hashed form)
• Profile photo (if uploaded)

2.2 Exam and Education Data

• Exam results and scores
• Exam start/end times
• Certificate information
• Actions performed in lab environments
• Career path preferences

2.3 Payment Information

• Transaction amount and date
• Payment method information (credit card details are not stored directly by us; they are processed by our secure payment infrastructure provider)

2.4 Technical Data

• IP address
• Browser type and version
• Operating system
• Access times and log records
• Cookie data

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Performing membership transactions and account management
• Providing exam services and evaluating exam results
• Generating and delivering certificates
• Processing payment transactions
• Ensuring platform security and preventing fraud
• Providing technical support to users
• Fulfilling legal obligations
• Developing and improving the Platform
• Sending promotional and informational communications with your consent

4. Legal Basis for Processing Personal Data

Your personal data is processed based on the following legal grounds as specified in Articles 5 and 6 of the KVKK:

• Performance of contract: Exam service delivery, account management, certificate issuance
• Legal obligation: Tax legislation, consumer legislation, and other legal requirements
• Legitimate interest: Platform security, fraud prevention, service improvement
• Explicit consent: Marketing communications, cookie usage (except essential cookies)

5. Transfer of Personal Data

Your personal data may be shared with third parties in the following cases:

• Payment processors: For the secure processing of payment transactions
• Cloud service providers: For the operation of the Platform infrastructure (data is stored in encrypted form)
• Legal authorities: With authorized public institutions when required by law
• Business partners: For certificate verification purposes upon employer request (only with your consent)

In the event of cross-border transfer of your personal data, the necessary measures are taken in accordance with Article 9 of the KVKK.

6. Data Security

The following technical and administrative measures are implemented to ensure the security of your personal data:

• Data transmission with SSL/TLS encryption
• Passwords stored using industry-standard hashing
• Regular security audits and penetration testing
• Access control and authorization mechanisms
• Log monitoring and anomaly detection
• Database backup and disaster recovery plans

7. Cookies

The Platform uses cookies to ensure proper functioning of services and to improve user experience:

8. Data Retention Period

Your personal data is retained for as long as necessary to fulfill the purpose of processing. If you close your account, your data will be securely deleted or anonymized after our legal retention obligations expire (e.g., at least 5 years under tax legislation, 10 years under commercial law, etc.).

9. Your Rights Under KVKK

Under Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information about the processing if it has been processed
• To learn the purpose of processing and whether it is used in accordance with its purpose
• To know the third parties to whom your data is transferred domestically or abroad
• To request correction if your data is incomplete or inaccurate
• To request deletion or destruction under Article 7 of the KVKK
• To request that corrections, deletions, or destructions be notified to third parties to whom data has been transferred
• To object to any outcome that arises against you through the analysis of processed data exclusively by automated systems
• To claim compensation for damages caused by unlawful processing of your data

To exercise these rights, you may submit a written request to support@cyberexam.io. Requests will be answered free of charge within 30 days at the latest.

10. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from persons under 18. If we become aware of such a situation, the relevant data will be deleted immediately.

11. Policy Changes

This Privacy Policy may be updated from time to time. Significant changes will be communicated through the Platform or via email. We recommend reviewing the current policy regularly.

12. Contact