Privacy notice.

The controller responsible for your personal data is ExaRock Systems ("ExaRock", "we"), operating exarock.com.

Registered address: [company registered address]. Contact for data-protection matters: contact@exarock.com.

We only collect data you choose to provide. Specifically: the corporate email address you submit to request a sector whitepaper, and the email address together with your answers, computed score, and maturity band when you complete the digital maturity assessment.

We do not run advertising trackers or third-party analytics on this site, and we do not use cookies except a single functional cookie (NEXT_LOCALE) that remembers your language preference.

We process your email to deliver the report or assessment you requested and to follow up about the engagement you initiated. The legal basis is the performance of steps taken at your request prior to a contract, and our legitimate interest in responding to business enquiries (GDPR Art. 6(1)(b)/(f); the corresponding KVKK grounds).

We do not add you to a marketing list and we do not sell or rent your data.

We keep enquiry data only as long as needed to respond and to maintain a record of the engagement, after which it is deleted. If you ask us to erase your data sooner, we will do so unless we are legally required to retain it.

Your data is handled by ExaRock and, where applicable, by service providers that host this site or deliver email on our behalf, acting under contract as processors. We do not share your data with any other third party for their own purposes.

Where data is processed outside your country, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect it.

You have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability. Where processing relies on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your supervisory authority (in the EU) or the KVKK Board (in Türkiye).

To exercise any of these rights, contact us at contact@exarock.com.

We may update this notice as our practices or the law evolve. The date above reflects the most recent revision.