Privacy Policy

1. Who is responsible

Dataskala is responsible for your data on ddRate. Contact: admin@ddrate.com.

2. What we collect and how

• Account: your email address. With Google sign-in, the name and profile picture Google gives us.
• Searches: the search text, its time and result, your IP address, your approximate location (country and city) and your device type, operating system and browser.
• Page visits: the pages you open (including search text in the address), the page you came from, your approximate location and your device type.
• Ratings you give and reports you send, with the details of the search a report concerns.
• A random identifier for your browser, stored in a cookie.

We collect this automatically through the website, and from Google if you sign in with Google. You need to give an email address to create an account; without it you cannot sign up.

3. Why, and on what legal basis

• To provide the service and your account (searches, rating cards, your ratings): performance of our agreement with you.
• To protect the service: daily search limits, request limits, a bot check and finding errors: our legitimate interest in a secure, working service.
• To count visitors: our legitimate interest in knowing how much the service is used.
• To answer your reports and requests: our legitimate interest in handling them.

We use cookies and browser storage only to keep you signed in, remember your language, apply the daily search limit, keep your search history, and recognise your browser for the purposes above.

4. Who receives it

• Hosting and database providers, to run the website and store data.
• AI and web search providers, which receive search text to create rating cards.
• A bot-check provider, which receives your IP address to protect the service.
• An email provider, which sends our internal alerts; they can contain IP addresses.
• Google, if you sign in with Google.

Some of these providers process data in the United States. The European Commission has adopted an adequacy decision for US companies certified under the EU-US Data Privacy Framework.

Other parties can receive your IP address when their content loads on our pages (website icons from Google, the bot check, and images from the websites they come from), which can let them recognise your browser across websites.

5. How long we keep it

• IP addresses of searches: 30 days. IP addresses of reports: 90 days.
• Searches, page visits and reports: 12 months.
• Technical records of how a search was processed: 90 days.
• Data of visitors without an account: 12 months after last use.
• Request-limit records: 24 hours. Internal alerts: 30 days.
• Your account and ratings: until you delete your account, which also deletes your searches, page visits and reports.

6. Your rights

You can ask for access to your data, its correction or deletion, a restriction of its use, and a copy in a portable format. You can also complain to a data protection authority. Write to admin@ddrate.com.

Under Article 11 of the Turkish Personal Data Protection Law (KVKK), you can also learn whether your data is processed and, if so, request information about it; learn why it is processed and whether it is used for that purpose; know the third parties in Turkey or abroad it is transferred to; ask for incomplete or wrong data to be corrected and for data to be deleted, and for this to be passed on to those third parties; object to a result against you that comes only from automated analysis; and claim compensation for damage from unlawful processing.

7. Your right to object

Where we rely on our legitimate interest, you can object at any time to the use of your data, for reasons related to your situation. Write to admin@ddrate.com.

8. Changes

When this policy changes, we update this page and its effective date.