DATA POLICY
Effective as of: [01.01.2025]
At Provance AI (TR:Iron And Moons LTD, EU:Provance AI Proptech Solutions), your privacy is of utmost importance to us. We collect and process personal data in full compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and other applicable privacy laws.
This policy outlines what personal data we collect, how we use it, and your rights as a data subject under EU law.
1. Data Controller Information
Provance AI
Email: info@provance.ai
Headquarters: Tampere / Finland, Istanbul / Türkiye
As the Data Controller, we determine the purpose and means of processing your personal data (Article 4(7) GDPR).
2. What Data We Collect (Article 13(1)(c) GDPR)
Through our website forms (e.g. contact forms, order forms), we may collect:
-
Identification Data: Name, email address, phone number, company name, job title
-
Communication Data: Messages, service interest, requests
-
Technical Data: IP address, browser type, timestamps (collected via cookies and analytics tools)
We only collect data that is necessary, relevant, and limited to what is required for the stated purpose (Article 5(1)(c)).
3. Purpose and Legal Basis for Processing (Articles 6 & 13 GDPR)
We process your data for the following purposes:
-
To respond to your contact or service request (Article 6(1)(b): performance of a contract or pre-contractual steps)
-
To manage customer relationships and support inquiries (Article 6(1)(f): legitimate interest)
-
To send marketing communications, newsletters, or product updates (Article 6(1)(a): consent, if opted-in)
-
To improve our products and platform via aggregated, anonymized analytics (Article 6(1)(f): legitimate interest)
We will not use your data for automated decision-making or profiling unless explicitly stated and consented to (Article 22 GDPR).
4. Data Retention (Article 5(1)(e))
We store your personal data only for as long as necessary to fulfill the purposes stated above, or as required by law. After that, your data is securely deleted or anonymized.
5. Data Recipients (Article 13(1)(e))
We may share your data with:
-
Internal staff of Provance AI for customer support and processing
-
Third-party service providers (e.g., email, CRM, or hosting providers) under data processing agreements compliant with Article 28 GDPR
-
Legal or regulatory bodies when required by law (Article 6(1)(c))
All third-party processors are GDPR-compliant and under contractual obligation to handle your data securely and confidentially.
6. International Transfers (Articles 44–49 GDPR)
Where we or our service providers transfer personal data outside the European Economic Area (EEA), such transfers are made using:
-
Adequacy decisions by the European Commission
-
Standard Contractual Clauses (SCCs) approved by the EU Commission
-
Binding Corporate Rules or other safeguards as defined by GDPR
7. Your Rights Under GDPR (Articles 12–23)
You have the following rights:
-
Right to Access (Article 15): You can request access to your data and obtain a copy.
-
Right to Rectification (Article 16): You can request correction of inaccurate or incomplete data.
-
Right to Erasure (Article 17): You can request deletion of your data (“right to be forgotten”).
-
Right to Restrict Processing (Article 18): You can request a temporary halt to processing.
-
Right to Data Portability (Article 20): You can request to receive your data in a structured format.
-
Right to Object (Article 21): You can object to processing based on legitimate interests or for marketing.
-
Right to Withdraw Consent (Article 7(3)): You may withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise your rights, contact us at info@provance.ai.
8. Cookies & Analytics (Articles 4(11), 6(1)(a))
We use cookies and analytics tools to enhance your user experience and measure website performance. Non-essential cookies will only be used if you consent via our cookie banner. You can manage or revoke consent at any time through your browser or our cookie settings page.
9. Right to Lodge a Complaint (Article 77 GDPR)
If you believe your data rights are violated, you can lodge a complaint with your local Data Protection Authority or the supervisory authority in our operational jurisdiction.
10. Policy Updates
This Data Policy may be updated to reflect changes in our practices or legal obligations. Any changes will be published on this page with an updated effective date.