Privacy & KVKK
Redakt and your personal data
Summary
This page covers two separate products: Redakt On-Premise, installed on your organization's server, and the Redakt Guard browser extension for Chrome and Edge.
- Documents stay in your organizationRedakt runs on your infrastructure; documents are never sent to Siskon or any cloud service.
- Document content is not loggedLogs never contain document content, file names or detected values.
- Your organization is the data controllerThe organization using Redakt is the data controller for the personal data in its documents.
- Form data is used to respond to your requestSiskon processes the form details you send by email to review and respond to your request.
How does Redakt On-Premise process personal data?
Where are documents processed?
| Browser interface | Documents are processed on the user's device and are never uploaded to the server. |
|---|---|
| Command-line tool | Documents are processed on the computer where the tool runs. |
| Masking API (off by default) | Documents are processed only in memory on your organization's server. They are never written to disk or cache and are released from memory once the response is sent. |
Is any data sent to Siskon?
No. Redakt On-Premise does not send document content, detected data or usage information to Siskon or any other external service. Language models and OCR files are loaded from your organization's server, and the browser app's security policy allows connections to that server only. No components are downloaded from the internet to the server during installation.
What is logged?
Server logs record information such as the user name, document type, the categories and number of detected items, and processing time. Document content, file names and detected values are never written to the logs. Your organization sets the log retention period and storage limit.
What stays on the user's device?
The browser may store language models, a signing key and a record of masked files. This record stores digital fingerprints (hashes) of files Redakt has already masked so it can recognize them; it stores no document content. It holds at most 5,000 entries, and each entry is kept for up to 90 days.
At the user’s request, a mapping file can be created so that the original values can be restored later. This file contains personal data and must be stored securely.
Who is the data controller?
The organization using Redakt is the data controller for the personal data in its documents. Because Redakt runs on your infrastructure, Siskon has no access to that data. If installation or support requires access to your systems, the scope of that access is set out in the contract between your organization and Siskon.
Please note: Redakt is a technical measure that helps prevent personal data from being shared unnecessarily; on its own, it does not make you compliant with KVKK. Context-dependent findings, such as names of people and organizations, should be reviewed before masking. If part of a document cannot be processed, the user is warned.
How does the Redakt Guard extension process personal data?
Redakt Guard is a separate product from Redakt On-Premise: a browser extension for Chrome and Edge that works on its own. This section describes the extension only.
What does the extension access?
- The content and file name of documents you upload to supported AI services (ChatGPT, Claude, Gemini, Microsoft Copilot).
- The text you type or paste on those same pages.
- If your organization restricts which accounts may be used, the domain of the email address shown on the sign-in screen. The comparison happens on your device; the address is neither stored nor sent.
The extension runs only on those services' addresses, stays inactive on other sites, and requests no broad site permissions at install time.
Where does processing happen?
Files and text are scanned and masked entirely on your device; the language model and OCR files ship inside the extension. Your original file is never modified, and only the masked copy continues to the AI service.
What is stored on your device?
| Settings | Interface language, scan profile and, if one is configured, your organization's server address. Kept until you change them. |
|---|---|
| List of masked files | Digital fingerprints (hashes) of files, so an already masked file is not scanned again. No document content is stored. It holds at most 5,000 entries, and each entry is kept for up to 90 days. |
| Numeric summaries | Masking categories and counts. At most 500 records are kept, and they never leave the device unless an organization server is configured. |
| Corporate rule list | Stored only when an organization server is configured: a copy of the list from that server, kept until the next successful connection. |
| Session data | Scan status and the names of processing steps. File names, document content and detected values are never written, and the data is cleared when the browser closes. |
The extension creates no mapping file: the original values behind the placeholders are not stored anywhere.
Does any data leave the device?
Not in a default installation. The extension connects to no address on its own; document content, text, file names and detected values never leave your device. No data is sent to Siskon under any circumstances.
In a managed installation, your administrator can configure the address of your organization's own Redakt server. The extension then connects only to that address: it fetches the corporate rule list and, after masking, sends a numeric summary of categories and counts. Those requests contain no document content, text, file names or detected values. With no address configured, the connection is never made.
Who is the data controller?
The organization using the extension is the data controller for the personal data in the files and text it scans; Siskon has no access to that data. For privacy questions about the extension, write to [email protected].
Contact form privacy notice
This English version is provided for information only. If it differs from the Turkish version, the Turkish version prevails.
This notice is provided under Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) to explain how the personal data you send by email using the contact form on this website is processed.
Data controller
| Company | SİSKON ENDÜSTRİYEL OTOMASYON SİSTEMLERİ SANAYİ VE TİCARET A.Ş. |
|---|---|
| MERSİS no. | 0771033765600027 |
| Tax office / no. | Konak Tax Office, 7710337656 |
| Business address | Dokuz Eylül University Central Campus DEPARK Beta Building, Adatepe Neighborhood Doğuş Street No: 207/AG Floor: 2, Unit: 202, 35390 Buca/İzmir, Türkiye |
| KEP (registered email) | [email protected] |
| [email protected] |
Personal data we process
- Identity: First and last name
- Contact: Email address, phone number
- Professional information: Company and job title
- Request details: Estimated number of users, products you are interested in, and your message
- Communication record: The date and time your email was sent
Please do not include special categories of personal data or other people's personal data in your message.
Purposes
- Responding to your request and contacting you
- Providing information and quotes about Redakt products
- Conducting discussions before entering into a contract
- Managing information security
Collection method and legal basis
The form uses the details you enter to create a draft in your email app. Your details reach Siskon when you send the email. Technical records that may be collected when you access this site are described under Cookies and site logs.
Depending on the purpose of processing, the personal data you provide is processed on the following legal bases under Article 5(2) of KVKK:
- Subparagraph (c): Processing the personal data of the parties to a contract is necessary and directly related to entering into or performing that contract.
- Subparagraph (f): Processing is necessary for Siskon's legitimate interests, provided that it does not infringe your fundamental rights and freedoms.
Transfers
For the purposes above only, your personal data may be transferred to the providers of our email, hosting and business software services and, when required, to authorized public authorities, in line with Articles 8 and 9 of KVKK. The conditions for transfers abroad are set out in Siskon's general privacy notice (in Turkish).
Retention
Your personal data is kept for as long as the purpose of processing requires and for the periods set by applicable law. After that, it is deleted, destroyed or anonymized in line with Siskon's Retention and Destruction Policy.
Your rights under Article 11 of KVKK
You may contact Siskon to exercise the following rights:
- Learn whether your personal data is being processed
- Request information about the processing, if it has taken place
- Learn the purpose of the processing and whether your data is used accordingly
- Know the third parties in Türkiye or abroad to whom your data is transferred
- Request correction if your data is incomplete or inaccurate
- Request erasure or destruction of your data under the conditions of Article 7 of KVKK
- Request that any correction, erasure or destruction be notified to the third parties who received your data
- Object to an adverse outcome resulting solely from automated analysis of your personal data
- Claim compensation if you suffer damage because your data was processed unlawfully
How to submit a request
You can send your request by any of the methods below, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Please write “Kişisel Verilerin Korunması Kanunu Kapsamında Bilgi Talebi” (Information request under the Personal Data Protection Law) on the envelope or in the email subject line.
- In person or through a notary publicDokuz Eylül University Central Campus
DEPARK Beta Building, Adatepe Neighborhood
Doğuş Street No: 207/AG
Floor: 2, Unit: 202, 35390 Buca/İzmir, Türkiye - KEP (registered email)[email protected]
- Email with a secure electronic or mobile signature[email protected]
- From an email address registered in our systems[email protected]
Your application must include your first and last name, your signature (for written applications), your Turkish ID number (or, for foreign nationals, your nationality and passport number), an address for correspondence, your email address if you have one, a phone number and the subject of your request. Requests are answered free of charge within 30 days at the latest; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.