Privacy & Data Security

1. Introduction and Data Controller

The DGMOS platform (web, mobile applications, and associated services) is operated by Delaware/USA-based DGMOS DG REGTECH C Corp and its Turkish local representation DG REGTECH SÜRDÜRÜLEBİLİRLİK YAZILIM ANONİM ŞİRKETİ (together referred to as 'DGMOS' or 'Company'). This Privacy Policy explains how the data of member companies, field personnel, drivers, and other users using our platform is collected, processed, and protected in accordance with KVKK (Law No. 6698 on the Protection of Personal Data) and GDPR (General Data Protection Regulation).

2. Mobile App and Platform Permissions

The sensitive user data and hardware permissions required and collected by our mobile application are transparently listed below:

• •Camera Permission: Used to photograph non-conformities detected during field inspections/checklists and scan ADR labels, barcodes/QR codes on chemical packages. Captured images are uploaded to our servers under encryption as attachments to the relevant inspection report; your device gallery is not accessed without permission.
• •File and Storage Access: File selection permission is requested to allow users to upload safety data sheets (SDS/MSDS), driver ADR certificates, and vehicle T9 documents to the system.
• •Location Data: Location data may be processed in the background during transport operations to verify that vehicles carrying dangerous goods remain on a safe route, direct emergency response teams to correct coordinates in the event of an accident/spill, and complete legal integrations with UETDS. This process is clearly notified to the user and is only performed while the trip is active.

3. Processed Data Categories Under KVKK & GDPR

To carry out operations in the logistics and facility processes of dangerous goods, DGMOS processes only the following data to the extent permitted by legal regulations and limited to the purpose:

• •Identity and Contact Data: Full name, email address ([email protected], etc.), phone number, encrypted password.
• •Professional and Corporate Data: Employed company title, tax office/number, role, Dangerous Goods Safety Adviser (DGSA) certificate numbers.
• •Driver and Vehicle Data: Driver's license, SRC certificate, ADR driver training certificate, vehicle license plate, T9 document, inspection reports.
• •Transaction and Audit Data: Transport documents, checklist answers, audit results, incident/accident logs, and operational transaction logs.

4. Data Processing Purposes and Legal Bases

Your personal data is processed based on the following legal grounds under KVKK Article 5 and GDPR Article 6:

• •Performance of Contract: Providing DGMOS SaaS platform services, creating user accounts, and license management.
• •Legal Obligations: Making UETDS (Transportation Electronic Tracking and Control System) notifications, performing e-Government DGSA assignments, and fulfilling legal notifications to official authorities.
• •Legitimate Interest: Ensuring platform security, troubleshooting system errors, preventing abuse, and improving service quality.

5. Account and Data Deletion Policy (Google & Apple Compliant)

Our users are granted full control over their data. You can delete your account and all associated data permanently at any time:

• •In-App Deletion: You can initiate the deletion of your account and personal data instantly by following the steps 'Account Settings > Profile > Delete My Account' via our mobile application or web platform.
• •Request via Email: If you wish to request the deletion of your account and personal data defined in the system, you can send a request from your registered email account to [email protected]. Your request will be processed and completed within 30 days, except for statutory retention periods (e.g. UETDS or tax legislation obligations).
• •Scope of Data Deletion: Once account deletion is completed; your name, email address, profile picture, and all personal data directly associated with you will be permanently deleted from our systems or anonymized. Historical transport documents or facility audits required for the operational integrity of your company will be archived, stripped of personal data.

6. Data Retention and Security

DGMOS offers enterprise-grade security infrastructure and strict control mechanisms:

• •All data is hosted in encrypted databases on AWS (Amazon Web Services) in isolated areas dedicated to each institution (Isolated Tenant).
• •Data transmission is encrypted with TLS 1.3 protocol. Rest data on the server is protected with AES-256 encryption standard.
• •Your data is stored for the duration required by the processing purpose, and in any case in accordance with legal prescription periods.

7. Data Sharing and Transfer to Third Parties

DGMOS does not sell your data to third parties for commercial gain. Sharing is only performed for the execution of the operation:

• •Within the scope of legal integrations with official institutions (Ministry of Transport UETDS system, e-Government portal).
• •Third-party ERP, WMS, accounting or vehicle tracking (telematics) systems integrated at the user's direction.

8. User Rights (KVKK & GDPR)

As a data subject, you have the following rights under KVKK Article 11 and GDPR Articles 15-22:

• •To learn whether your personal data is processed and to request information if processed,
• •To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• •To request correction of incomplete or incorrectly processed data, deletion or destruction of data,
• •To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.

9. Contact and Application

For any questions regarding our privacy policy, data processing processes, or data/account deletion requests, you can contact our data controller representative through the following channels:

• •Email: [email protected]
• •Headquarters Address (USA): 8 The Green, Ste A, Dover, DE Zip: 19901 Delaware, USA
• •Turkey Representative Address: Meydan AVM, Justwork Office, Ümraniye, İstanbul, Turkey