This page describes how VroomScan processes personal data as a data controller under the GDPR (EU) and KVKK (Türkiye), and the legal bases we rely on.
1Roles
VroomScan acts as the data controller for the personal data you provide. Our infrastructure providers act as data processors on our behalf.
2Legal bases for processing
- Contract - to provide the diagnosis service you signed up for.
- Consent - for optional analytics and marketing communications.
- Legitimate interest - to secure the service and improve detection quality.
- Legal obligation - where retention or disclosure is required by law.
3International transfers
Where data is transferred outside your region, we rely on Standard Contractual Clauses and equivalent safeguards to ensure your data remains protected.
4Sub-processors
We use a limited set of vetted sub-processors for cloud hosting, audio processing and analytics. Each is bound by data-protection terms and processes data only on our documented instructions.
5Your data subject rights
Under GDPR and KVKK you have the right to access, rectification, erasure, restriction, portability and objection. You may also lodge a complaint with your local supervisory authority.
Email info@vroomscan.com for any data-protection request.
6Security
We apply encryption in transit, access controls and regular reviews to protect personal data against unauthorised access, loss or misuse.