KVKK Privacy Notice

The controller of the personal data described here is Laten Lukken Yazılım Sanayi Ticaret Ltd. Şti. ("Laten Lukken" or "we"), a company established in Türkiye. Our registered address is published in the Turkish Trade Registry Gazette; we send it straight away on request by e-mail. Contact and requests: support@workoutos.app.

• Visitors to workoutos.app and workoutos.com.tr
• People who join the early access list, fill in the contact or demo form, or write to us by e-mail
• Owners, representatives and panel users (managers, trainers, front desk) of businesses that sign up for or subscribe to Workout OS or Workout Studio

If you are a member of a gym or a client of a studio: the business you belong to is the controller of your data. Laten Lukken processes that data only on the business's behalf and instructions, as a processor. Please contact the business first; if you write to us, we will forward your request to them without delay.

Our relationship with businesses is governed by the Data Processing Agreement.

The box on the demo form confirms that you have read this notice; answering your demo request relies on the grounds above, not on consent. You can withdraw marketing consent at any time with the link in every message or by writing to us.

• Directly from you: website forms, e-mail, sign-up and settings screens in the panel
• Automatically: server, security and audit logs created when you use the sites and panels
• From the payment provider: payment and subscription status from Polar (never the card number)

Data is collected electronically, by fully or partly automated means.

We do not sell your data. We transfer only what is needed for the purposes above to:

Details: Sub-processors.

Transfers abroad: because some of these services, including hosting, are outside Türkiye, your data is transferred abroad. Transfers rely on appropriate safeguards under Article 9 KVKK, the standard contracts published by the Personal Data Protection Board: a standard contract is signed with each recipient abroad and notified to the Board within 5 business days of signature.

When a period ends, data is deleted, destroyed or anonymised. A record of deletions (without personal data) is kept for at least 3 years.

You may apply to Laten Lukken to:

• Learn whether your personal data is processed
• Request information if it is processed
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties in Türkiye or abroad to whom data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under the conditions of Article 7 KVKK
• Request that corrections, deletions and destructions be notified to the third parties the data was transferred to
• Object to a result against you arising from analysis solely by automated systems
• Claim compensation for damage caused by unlawful processing

Send your application in Turkish with your full name, Turkish ID number (or, for foreign nationals, nationality and passport number), address for notifications, e-mail and phone if any, and the subject of your request (Communiqué on the Procedures and Principles of Applications to the Controller):

• From the e-mail address you previously gave us and that is registered in our systems, to support@workoutos.app
• Signed with a secure electronic signature or mobile signature, to support@workoutos.app
• By wet-signed letter to our address registered in the Turkish Trade Registry (published in the Turkish Trade Registry Gazette; write to support@workoutos.app and we send it the same day)

We conclude your application free of charge as soon as possible and within 30 days at the latest. If the process involves an additional cost, a fee may be charged under the Board's tariff. If your application is rejected, our answer is insufficient or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning our answer and in any case within 60 days of your application.