Privacy Policy

1. Data controller

Data controller: Zynova Sağlık Teknolojileri Ltd. Şti.. Data controller contact: info@zynovaoncoatlas.com.

Registered address details may be provided upon request or in applicable corporate agreements.

Trade registry, MERSIS, or tax office details may be provided upon request or in corporate agreements.

This policy applies to data processed through the website, demo environment, and authorized user sessions.

2. Categories of data processed

The following types of data may be processed on the platform:

• Account and identity information (name, email, organization)
• Session, security, and audit logs
• Clinical content entered by authorized users
• Language preference, cookie preferences, and technical logs
• Usage analytics after consent

3. Purposes and legal bases

Data may be processed to provide the service, maintain security, offer support, meet contractual obligations, and pursue legitimate interests.

Health data should be processed only with consent, contract, or other legal bases required by applicable law.

4. Cookies

Necessary cookies are required for the platform to function. Analytics and marketing cookies are enabled only with your explicit consent.

You can update cookie preferences at any time via the cookie banner or preferences panel.

5. Subprocessors

Subprocessors may be used for hosting, security, analytics after consent, and AI infrastructure where applicable. An up-to-date list may be provided upon request or in applicable data processing agreements.

Additional details may be provided in applicable data processing agreements or institutional agreements.

6. Retention and transfers

Retention periods may vary depending on account type, contractual requirements, and applicable law.

Where international transfers are required, appropriate safeguards are intended. Additional details may be provided in applicable data processing agreements or institutional agreements.

7. Your rights

Depending on applicable law, you may have the following rights:

• Access, correction, and deletion
• Restriction or objection to processing
• Data portability
• Withdrawal of consent
• Complaint to a supervisory authority