Last updated: [Month DD, 2026]
Privacy Policy
This Privacy Policy explains how Datatoolpack LLC (“Datatoolpack”, “AutoData”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit datatoolpack.com, create an account, or use the AutoData platform (collectively, the “Services”).
We are committed to processing personal data in line with the EU General Data Protection Regulation (GDPR) and the Turkish Law on the Protection of Personal Data No. 6698 (KVKK), as applicable.
1. Who we are (Data Controller)
For data we collect about website visitors and account holders, the data controller is:
- Company: Datatoolpack LLC
- Address: [Registered Address]
- Email: [privacy@datatoolpack.com]
- Data Protection contact: [DPO / responsible person name and email, if applicable]
2. Two roles: controller and processor
It is important to distinguish two situations:
- As a controller — We decide how and why we process the personal data of our website visitors, leads, and account holders (for example, contact form submissions and account details). This Privacy Policy governs that processing.
- As a processor — When you upload datasets into AutoData for preparation, those datasets may contain personal data. For that content, you (the customer) remain the controller and we act as a processor on your behalf, processing the data only to provide the Services and according to our agreement and/or Data Processing Agreement (DPA). We do not use your uploaded datasets for our own purposes.
3. Personal data we collect
3.1 Information you provide
- Contact & demo requests: name, surname, email address, phone number, company name, and any message you send through our forms.
- Account data: credentials and profile details when you register or log in to the AutoData platform.
- Communications: any information you share when you contact support or correspond with us.
3.2 Information collected automatically
- Usage & device data: IP address, browser type, device and operating system, pages viewed, referring URLs, and interaction data.
- Cookies and similar technologies: see our Cookie Policy for details.
3.3 Customer datasets
Datasets you upload to AutoData may include personal data. We process this content as a processor (see Section 2) solely to deliver the Services.
4. How we use personal data and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to demo and contact requests | Consent / steps prior to entering a contract |
| Create and manage your account, provide the Services | Performance of a contract |
| Operate, secure, and improve our website and platform | Legitimate interests |
| Send service and, where permitted, marketing communications | Consent / legitimate interests |
| Comply with legal and regulatory obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
5. Sharing and disclosure
We do not sell personal data. We may share it with:
- Service providers / sub-processors who help us run the Services, including cloud and processing infrastructure partners such as [Microsoft Azure, Google Cloud, Databricks, and others], under appropriate contractual safeguards.
- Professional advisors (e.g., legal, accounting) where necessary.
- Authorities where required by law or to protect our rights.
- Business transfers in connection with a merger, acquisition, or sale of assets.
6. International data transfers
Some of our providers may process data outside your country, including outside the European Economic Area or Türkiye. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, as required by GDPR and KVKK.
7. Data retention
We keep personal data only as long as necessary for the purposes described above, or as required by law. Indicative periods: contact/lead data [e.g., up to 24 months], account data [for the life of the account plus [X] months], and legally mandated records for their statutory period. Customer datasets are retained and deleted according to your instructions and our agreement.
8. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No system can be guaranteed to be completely secure, and we encourage you to use strong credentials and keep them confidential.
9. Your rights
Subject to GDPR and KVKK, you may have the right to: access your personal data; request correction or erasure; restrict or object to processing; request data portability; and withdraw consent. Under KVKK Article 11 you may also learn whether your data is processed and request that the consequences of any unlawful processing be remedied.
To exercise your rights, contact us at [privacy@datatoolpack.com]. You also have the right to lodge a complaint with your local supervisory authority (in Türkiye, the Personal Data Protection Authority — KVKK Kurumu; in the EU, your national data protection authority).
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
11. Third-party links
Our website may link to third-party sites we do not control. This Policy does not apply to those sites, and we recommend reviewing their privacy notices.
12. Children’s privacy
The Services are intended for business users and are not directed to children. We do not knowingly collect personal data from children.
13. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the latest version, and material changes will be communicated where appropriate.
14. Contact us
Questions about this Policy or your personal data? Contact Datatoolpack LLC at [privacy@datatoolpack.com], [Registered Address].