Privacy Policy and KVKK Privacy Notice

1. Data controller

This notice has been prepared pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform you about the personal data processed through neonselfcheck.com and its associated applications (mizac.neonselfcheck.com, neon-eq and the life skills surveys).

Data controller: Uğur Tombul (individual seller), Kemal Paşa Mah. Esentepe Cad. No:48 C D:7 Serdivan/Sakarya · E-mail: info@neonselfcheck.com · Phone: +90 532 596 28 99.

In institutional use (if a school, course centre or company has invited you to take the test), the data controller is the institution that invited you; in this case Neon Selfcheck acts as a data processor on behalf of the institution and under its instructions. The institution's own privacy notice is shown before the test.

2. Personal data processed

Identity and contact: full name, phone number, e-mail address.

Test information: descriptive information requested in the test, such as age range, grade level and city; your test responses and the temperament, emotional intelligence and life skills profiles and reports generated from these responses.

Data relating to children: the responses given by parents about their child in parent surveys, and students' responses in student surveys.

Order and transaction information: the service purchased, order note, payment result (approved/declined), refund and cancellation correspondence. Your card details do not reach Neon Selfcheck.

Coaching information: the information you share in the written expert review and e-mail coaching correspondence, and the coach's notes.

Usage information: where you came to the site from (source), page view and click statistics (only if you allow cookies, via Google Analytics).

Because test responses relate to personality and emotional tendencies, they are treated as sensitive. The tests are not intended for psychological or medical diagnosis; no health data are collected.

3. Purposes of processing and legal grounds

Administering the test, calculating its results and preparing the personalised report — legal ground: your explicit consent (KVKK Art. 5/1). Consent is obtained through a separate checkbox before the test begins.

Receiving your order, verifying payment, delivering the report, and providing the written review and e-mail coaching — legal ground: the establishment and performance of a contract (Art. 5/2-c).

Record-keeping and retention obligations arising from invoicing, distance sales and consumer legislation — legal ground: being expressly provided for by law and the fulfilment of a legal obligation (Art. 5/2-a and 5/2-ç).

Handling requests, complaints and refund processes; protecting rights in possible disputes — legal ground: the establishment, exercise or protection of a right (Art. 5/2-e).

Service security and the prevention of misuse and automated (bot) requests — legal ground: legitimate interest (Art. 5/2-f).

Analysing and improving site usage — legal ground: your explicit consent (cookie consent). If you do not give consent, analytics cookies do not run.

In institutional use, the preparation by the institution of group and individual reports for the development of its employees or students — the legal ground is determined by the institution and explained in the institution's privacy notice.

4. To whom the data are transferred

Hosting and database: Google Ireland Ltd. / Google LLC (Firebase). Test responses and reports are stored on servers in Germany (Frankfurt, europe-west3).

Payment: Shopier payment infrastructure (shopier.com). Card details are processed directly on Shopier's secure payment page; only the payment result and your name, phone number and e-mail address are passed on to Neon Selfcheck.

Communication and report delivery: the e-mail (Google) and WhatsApp (Meta Platforms) services through which the report and the review and coaching correspondence are sent; the Telegram messaging service through which order requests are notified to Neon Selfcheck; and the FormSubmit service through which the institutional demo request form is forwarded to e-mail.

Site statistics: Google Analytics (only if you have given cookie consent).

In institutional use: your test results and report are shared with the authorised administrator of the institution that invited you. No other institution or person can see these data.

Authorised public institutions and organisations: when there is a legal request, and only to the extent required by law.

Transfer abroad: Since some of the service providers above have servers outside Türkiye (in the European Union and the USA), your data are transferred abroad. This transfer is carried out under KVKK Art. 9, within the framework of standard contracts concluded with the service providers and the relevant safeguards; where these are not available, it is based on your explicit consent.

5. Method of collection

Data are collected electronically and partly by automated means, through forms and test screens on the site and application, the payment page, e-mail, WhatsApp and coaching correspondence. In institutional use, data are obtained from tests completed via the invitation link shared by the institution.

6. Retention periods

Test responses, profiles and reports: 2 years from completion of the test. If you ask for them to be deleted within this period, they are deleted upon your request.

Order, payment and refund records: 3 years as required by distance sales and consumer legislation; for documents within the scope of tax legislation, the period prescribed by that legislation (up to 10 years).

Coaching notes and correspondence: 2 years from the end of the coaching process.

Site statistics: 14 months in Google Analytics.

In institutional use, the retention period is determined by the contract concluded with the institution; when the contract ends, the data are deleted or anonymised.

Data whose retention period has expired are deleted, destroyed or anonymised so that they cannot be associated with anyone.

7. Security measures

Access to data is restricted by authorisation rules at database level; each institution's data are isolated from the others. Full names and contact details are visible only to authorised administrators. Connections are encrypted (HTTPS), invitation links are generated so that they cannot be guessed, and protection against automated requests is applied.

8. Payment and card security

Your card details never reach Neon Selfcheck at any stage and are not stored in our system. Payment is made on Shopier's secure payment page, encrypted with an SSL certificate; card details are transmitted from this page directly to Shopier and the bank.

For cards supported by the bank, payment is confirmed with 3D Secure, using a one-time password sent by the bank.

Our site is encrypted with HTTPS (SSL); the information you send through forms is encrypted in transit.

Do not share your card details with anyone by e-mail, WhatsApp or phone. Neon Selfcheck will never ask you for card details through these channels.

9. Third-party links

The site may contain links to other sites (such as the payment page, social media and test applications). The owners of those sites are responsible for their privacy practices; we recommend that you review the privacy policies of the sites you visit separately.

10. Your rights under Article 11 of KVKK

To learn whether your personal data are processed and, if so, to request information about this.

To learn the purpose of processing and whether the data are used in accordance with that purpose.

To know the third parties to whom the data are transferred in Türkiye or abroad.

To request correction if the data have been processed incompletely or incorrectly.

To request deletion or destruction within the framework of the conditions in KVKK Art. 7.

To request that the correction, deletion and destruction operations be notified to the third parties to whom the data have been transferred.

To object to any result to your detriment arising from the analysis of the data exclusively by automated systems.

To claim compensation if you suffer damage due to unlawful processing.

You may withdraw the explicit consent you have given at any time; withdrawal does not affect processing carried out up to that date.

11. How to apply

You can submit requests regarding your rights, together with information to verify your identity, by e-mail to info@neonselfcheck.com or in writing to Kemal Paşa Mah. Esentepe Cad. No:48 C D:7 Serdivan/Sakarya.

Your application is concluded free of charge within 30 days at the latest. If the process requires an additional cost, the fee schedule set by the Turkish Personal Data Protection Board may be applied.

In institutional use, you should first submit requests concerning your data to the institution that invited you; we forward any requests that reach us to the institution.

If your application is rejected, if you find the response inadequate, or if no response is given in time, you may file a complaint with the Turkish Personal Data Protection Board.

12. Cookies

The site stores in your browser only the preference records necessary for it to work (for example, your cookie consent choice). Analytics cookies (Google Analytics) run only if you choose "Accept" in the cookie notice; if you choose "Decline", they are not used.

13. Changes to this policy

This notice is updated when necessary; its current version is always published on this page. The date at the top of the page shows the last update.