EN TR

LabBee

Privacy Policy

Last updated: August 11, 2026

This Privacy Policy explains how LabBee collects, uses, shares, and protects your personal data. It covers your rights under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”).

1. Data controller

The data controller responsible for your personal data is the individual who operates LabBee. Full operator details are published in our Imprint. Contact: support@labbee.app.

2. What data we collect

We do not run advertising or third-party analytics trackers, and we do not sell your personal data.

3. Why we process your data and our legal basis

PurposeLegal basis (GDPR)Basis (KVKK)
Create and run your account; provide the tools and lab featuresPerformance of a contract (Art. 6(1)(b))Sözleşmenin ifası (md. 5/2-c)
Keep you signed in, prevent abuse, secure the ServiceLegitimate interests (Art. 6(1)(f))Meşru menfaat (md. 5/2-f)
Send service emails (password reset, invites, notifications)Contract / legitimate interestsSözleşmenin ifası / meşru menfaat
Google Sign-In and the optional “usage data” preferenceConsent (Art. 6(1)(a))Açık rıza (md. 5/1)
Comply with legal obligationsLegal obligation (Art. 6(1)(c))Hukuki yükümlülük (md. 5/2-ç)

4. Who we share it with

5. International transfers

LabBee’s servers are hosted with Hostinger in Frankfurt, Germany (within the EEA). If you use Google Sign-In, some data is processed by Google in the United States. Where personal data leaves Türkiye or the EEA, we rely on appropriate safeguards and, for Google Sign-In, on your explicit consent.

6. How long we keep your data

We keep your account data for as long as your account exists. When you delete your account, your personal data and the content tied to it are deleted; some records may persist briefly in backups before being overwritten. Support messages are kept as long as needed to handle your request and for our records. Security-related logs are kept for a limited period.

7. Your rights

Under the GDPR, you have the right to access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection, and to withdraw consent at any time. You may also lodge a complaint with a data protection supervisory authority.

Under the KVKK (Article 11), you have the right to: learn whether your personal data is processed; request information about the processing; learn its purpose and whether the data is used accordingly; know the third parties to whom data is transferred at home or abroad; request correction of incomplete or incorrect data; request deletion or destruction; request that corrections and deletions be notified to third parties; object to a result that arises solely from automated analysis; and claim compensation for damage caused by unlawful processing.

How to exercise them: many actions are self-service in your account — you can edit your name, change your privacy preference, and delete your account. For anything else, contact us at support@labbee.app. Under the KVKK we respond within 30 days.

8. How we protect your data

Passwords are stored using bcrypt hashing and are never kept in plain text. The site is served over HTTPS. Access to lab data is controlled by role and independently re-checked on every request. No system is perfectly secure, but we apply reasonable technical and organisational measures.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes to this Policy

We may update this Policy. Material changes will be posted on this page with a new “last updated” date.

11. Contact

For privacy questions or to exercise your rights: support@labbee.app. Operator details: Imprint.