In force · operator-approved notice

Your data rights (GDPR / KVKK)

How to see, correct, export or erase personal data on CONCILERA. This aydınlatma is in force. It is not legal advice. A Kurul protocol number is printed here only when Kurul issues one.

Last updated: 9 September 2026 · In force. Approved 9 September 2026 by SMARTEDTECH SL (owner and chief architect). Platform: CONCILERA (concilera.com)

Who is responsible for your data?

CONCILERA operates the case files, invites, evidence metadata and workbench accounts collected through concilera.com. Privacy requests: privacy@concilera.com. Data-protection mailbox: dpo@concilera.com.

A listed organization is a separate controller for data it processes in its own workbench. That relationship is not a CONCILERA “admin role”.

Operator: SMARTEDTECH SL. Trade name: CONCILERA (concilera.com). VAT/NIF: B66970831. Sole administrator: Mustafa Yurteri.

Correspondence: Carrer Agricultura, 16, 1º, 9ª, 08320 El Masnou, Barcelona, Spain. Registered office: Av. Portal de l'Àngel, 42, 3º, 08002 Barcelona, Spain.

Registry: Registro Mercantil de Barcelona · T 45858 · F 103 · S 8 · H B-501172 · capital 6000 €. Constituted: 2017-03-10.

Public contact: privacy@concilera.com, legal@concilera.com, dpo@concilera.com. A separate telephone number is not published.

VRIZMA owns dispute process. VeriChain owns proof. Veruma owns verification. CONCILERA does not store those truths as its own.

privacy@concilera.com · dpo@concilera.com

  1. 1. Art. 15 GDPR / KVKK Art. 11

    Right of access

    You can ask whether we process your personal data and receive a copy, with information about purpose, recipients and retention. Evidence bytes stay quarantined until accepted and are never placed in an export file.

    How to exercise: Signed-in: request a pack from /app/exports. Otherwise email privacy@concilera.com with subject Access.

  2. 2. Art. 16 GDPR / KVKK Art. 11

    Right to rectification

    Inaccurate or incomplete personal data can be corrected. Case claims stay your confirmed statement; a correction request does not rewrite an obligation or a seal.

    How to exercise: Email privacy@concilera.com with subject Rectification. Profile fields you can edit yourself should be edited in the account screens.

  3. 3. Art. 17 GDPR / KVKK Art. 11

    Right to erasure

    You may ask for deletion when the data is no longer needed for the purpose, or when another ground in the law applies. A legal hold is not a silent refusal: the response states the reason. Some records may stay because of a hold, a seal, or another legal duty.

    How to exercise: Signed-in: Request erasure on /app/exports. The action is legal-hold-aware. You can also email privacy@concilera.com with subject Erasure.

  4. 4. Art. 18 GDPR

    Right to restriction of processing

    You can ask us to store the data and pause other uses while a contest, hold or objection is assessed. Restriction is not a public-case takedown and does not buy rank.

    How to exercise: Email privacy@concilera.com with subject Restriction. There is no self-serve restriction button yet.

  5. 5. Art. 20 GDPR

    Right to data portability

    Where the law gives a portability right, you can receive a structured, machine-readable pack (JSON and markdown in a zip). The pack covers cases, claims, statements, timeline, disclosures, obligations, grants and evidence metadata you can access. It does not include evidence bytes.

    How to exercise: Signed-in: Request a portability export on /app/exports. The due date is 30 days. Download is a time-limited signed link.

  6. 6. Art. 21 GDPR / KVKK Art. 11

    Right to object

    You may object to processing based on legitimate interests. Direct marketing is not a CONCILERA product surface. Objecting does not invent a dispute outcome and does not close a file.

    How to exercise: Email privacy@concilera.com with subject Objection.

  7. 7. Art. 22 GDPR / KVKK Art. 11

    Automated decision-making

    CONCILERA does not take a binding legal decision about you by automated means. AI does not produce a responsibility share, a finding of who is right, or an official outcome. A model-backed pre-assessment is not a signed expert report. A settlement proposal is not mediator minutes. SMARTEDTECH SL’s human-desk terms are in force; a named licensed person is still appointed to the file before a legal-title document is issued.

    How to exercise: If an automated output affected you, email privacy@concilera.com with subject Human review. Unknown official routes already go to human review.

KVKK — Turkish data protection law

Residents of Türkiye are protected by Law No. 6698 (KVKK). Article 11 rights largely mirror the GDPR list above: learning whether data is processed, purposes and transfers, correction, deletion, and objection to automated processing.

KVKK requests use the same mailboxes and, when you are signed in, the same /app/exports actions. This page is the public aydınlatma / haklar text. It is in force.

SMARTEDTECH SL adopts the KVKK standard contract for overseas hosting in Ireland. Company file CONCILERA-KVKK-SC-2026-09-09 is the operator’s transfer record, approved 9 September 2026. A Kurul protocol number is printed here only when Kurul issues one.

Withdrawing consent

Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. Party sign-in stays invited-only. Withdrawal that removes a required account claim may stop that mailbox from using the workbench. Email privacy@concilera.com.

Right to lodge a complaint

You may lodge a complaint with a supervisory authority in your country.

Residents of Türkiye may contact the Kişisel Verileri Koruma Kurumu (KVKK Board): https://www.kvkk.gov.tr

The lead supervisory authority for GDPR, given the Spanish establishment, is the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es.

Response timelines

Statutory window: 30 calendar days (GDPR one month / KVKK 30 days). Complex requests may take longer; you will be told.

Signed-in portability packs are produced as a server action; download uses a signed link. Email to privacy@concilera.com is acknowledged as mail, not as a fake 72-hour portal.

A refusal states a reason. Silence is not a lawful answer.

Open data exportEmail privacy@concilera.comDPAPrivacy

Your data rights (GDPR / KVKK) · CONCILERA