Privacy notice
Last updated: 2026-12-01
1. Who we are
Osilera is a product of D4 Dijital Çözümler A.Ş., Hüseyinağa Mah. İstiklal Cad. GrandPera No:56-58 İç Kapı No: 5, Beyoğlu, İstanbul, Türkiye, tax number 2650762428 (Beyoğlu Tax Office), MERSİS number 0265 0762 4280 0001 ("D4", "we"). For this website and for the accounts people use to sign in to Osilera, D4 is the data controller. Contact: privacy@osilera.com, or by post to the address above.
2. Two roles: controller and processor
Controller. We decide how we use the data of website visitors and of the people who hold an Osilera account (name, email address, sign-in identity, language, security settings).
Processor. The machine data our customers store in Osilera — their machines, measurements, alarms, reports and the names of their staff — is processed on the customer's behalf, under a data-processing agreement with that customer. Questions about that data go to the customer company first.
3. What we collect and why
| Data | Purpose | Legal basis (GDPR / KVKK) |
|---|---|---|
| Name, email address, the sign-in provider and its account identifier, language | Creating and securing your account; letting you sign in | Contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Security records: sign-ins, multi-factor settings, audit entries | Protecting accounts and customer data; showing customers who accessed their data | Legitimate interest and legal obligation (GDPR Art. 6(1)(f), (c); KVKK Art. 5(2)(f), (ç)) |
| Messages you send us | Answering you | Legitimate interest; contract |
| Technical data of website visits (IP address, browser) in server logs | Running and securing the website | Legitimate interest |
Website analytics, only if you allow it: the pages you visit, the page you came from, browser, device type, screen size, approximate location (country and city, worked out from the IP address, which Google Analytics does not keep) and a random identifier kept in the cookies _ga and _ga_<ID> | Counting visits and learning which pages help visitors, to improve the website | Consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
We receive this data from you, from the sign-in provider you choose (Google, Apple or Microsoft), and automatically from your browser when you visit the website. The account data in the first row is needed to have an account; without it we cannot create one.
This website sets no advertising cookies. It uses Google Analytics, through Firebase, only if you allow it in the banner shown on your first visit; if you decline, it sets no cookie and nothing is sent to Google. If you allow it, the cookies _ga and _ga_<ID> recognise a returning browser for up to 13 months; Google signals and all advertising features are switched off. You can change your choice at any time with “Cookie settings” at the foot of every page. Your choices of theme and of analytics are kept in your own browser, not sent to us. If you sign in to Osilera Web, we use only the cookies strictly necessary to keep you signed in. We do not sell personal data, and we take no decision about you solely by automated means that has legal or similarly significant effects.
4. Who receives data
Google Cloud (hosting in the EU, region europe-west1; sign-in through Google Identity Platform), Mailgun (email, EU region), Apple, Google and Microsoft when you choose to sign in with their accounts, and, only if you allow website analytics, Google Ireland Ltd and Google LLC for Google Analytics, which may process that data outside the EU, including in the United States. Each works for us under a data-processing agreement. We will update this list before we add a provider. The administrators of a customer company see the account data of the people in their team. We disclose data to authorities only where the law requires it.
Your data is stored in the EU. For data from Türkiye that is a transfer abroad under KVKK Art. 9, made under standard contracts in the form announced by the Personal Data Protection Board and notified to the Authority within five business days of signing. Where a provider may access data from outside the EU or Türkiye, the transfer relies on the European Commission's standard contractual clauses, on the EU–US Data Privacy Framework where the provider is certified under it, or on an adequacy decision.
5. How long we keep it
Account data for as long as the account exists; after you delete the account it is removed within 30 days. Customer data for as long as the customer's agreement runs, then returned or deleted as the data-processing agreement provides, in any case within 90 days of the agreement's end unless the law requires longer. Messages you send us for as long as needed to answer and follow up, and no more than 24 months after the last contact. Security records for 12 months. Server logs for 12 months. Website analytics data for 14 months in Google Analytics. Where the law requires us to keep a record, we keep it for the period the law sets.
6. Your rights
You may ask for access to, correction, deletion or restriction of your personal data, object to its use, withdraw a consent you have given, and receive your data in a portable format (GDPR Art. 15–21; KVKK Art. 11). Write to privacy@osilera.com or to the address above, saying who you are and what you ask. We answer free of charge within 30 days. You may also complain to your data-protection authority — in Türkiye the Kişisel Verileri Koruma Kurumu, in the EU the authority of your country.
7. Security
We protect data with technical and organisational measures such as access control, audit records and encrypted connections. If a breach puts your data at risk, we notify the authority and, where the law requires, you, within the time the law sets (72 hours for the authority under both GDPR and KVKK).
8. Children
This website and Osilera are for professionals aged 18 and over. We do not knowingly collect children's data.
9. Changes
We will publish any change here with its date, and tell account holders of material changes by email.