Gizlilik Politikası

Last updated: January 2026

Giriş

Construction Hub olarak gizliliğinize değer veriyoruz. Bu gizlilik politikası, platformumuzu kullandığınızda kişisel verilerinizin nasıl toplandığını, kullanıldığını ve korunduğunu açıklar. GDPR (Avrupa Birliği Genel Veri Koruma Tüzüğü) ve ilgili yerel mevzuata tam uyum içinde çalışıyoruz.

This policy applies to all platform users — registered accounts, website visitors, and individuals whose data is processed through our services (e.g., employees of client companies).

Key terms: "Data Controller" is Construction Hub; "Data Processor" is any third party processing data on our behalf; "Data Subject" is any natural person whose data we process.

Topladığımız veriler

Aşağıdaki kişisel veri kategorilerini topluyoruz:

Data you provide during registration and use

  • Identification data: first name, last name, company tax number (for business registration)
  • Contact data: email address, phone number, company address
  • Professional data: position, project role, department
  • Financial data: payment information (processed by a certified payment provider — we do not store card numbers)

Automatically collected data

  • Technical data: IP address, browser type, operating system, screen resolution
  • Usage data: pages visited, actions within the platform, session duration
  • Cookie data: session identifiers, language preferences, cookie consent

Data from third parties

  • IFC/BIM file data: construction elements, quantities, dimensions (uploaded by the user)
  • Integration data: information from connected systems (if applicable)

3. How we use your data

We use your data for the following purposes:

  • Service delivery: creating and managing accounts, processing projects, contracts, invoices and quantity surveys
  • Payment processing: invoicing, subscriptions and payment management through a certified payment provider
  • Communication: sending system notifications, registration confirmations, service change notices
  • AI-based features: automatic recognition of nomenclature items from IFC files, price suggestions, quantity validation
  • Platform improvement: analyzing usage patterns to optimize user experience
  • Security: detecting suspicious activity, preventing unauthorized access, audit logging
  • Legal compliance: accounting and tax obligations, responding to legal requests

Hukuki dayanak

Verilerinizin işlenmesi şu hukuki dayanaklara dayanır:

  • Sözleşmenin yerine getirilmesi (GDPR Madde 6(1)(b))
  • Yasal yükümlülük (GDPR Madde 6(1)(c))
  • Meşru menfaat (GDPR Madde 6(1)(f)) — platformun güvenliği ve iyileştirilmesi
  • Açık onay (GDPR Madde 6(1)(a)) — pazarlama iletişimi ve analitik çerezler için

5. Sharing data with third parties

We do not sell your personal data. We share data only with trusted service providers bound by Data Processing Agreements (DPA):

All third parties outside the EU are bound by Standard Contractual Clauses (SCCs) pursuant to European Commission Decision (EU) 2021/914.

6. Data retention

We retain your data for different periods depending on the type:

  • Account data: until account closure + 30 days for technical deletion
  • Audit logs: 3 years for change tracking
  • Technical logs (server): 90 days
  • Cookie data: up to 12 months or until consent withdrawal
  • Anonymized data: may be stored indefinitely (not personal data)

After expiry, data is automatically deleted or irreversibly anonymized.

Çerezler

Platformun çalışması için ve deneyiminizi iyileştirmek için çerezler kullanıyoruz. Detaylar için lütfen Çerez Politikamıza bakın.

  • Essential cookies: session cookies for authentication and form protection, cookie consent. These cookies are necessary and cannot be disabled
  • Functional cookies: language preferences, theme (light/dark), last visited page
  • Analytics cookies: Google Analytics (if enabled) for traffic analysis — only with your consent

You can manage cookies through the consent banner or from the settings in the site footer. For more information, see our Cookie Policy.

Veri güvenliği

Verilerinizi korumak için aşağıdaki teknik ve organizasyonel önlemleri uyguluyoruz:

  • Aktarımda (TLS) ve dinlenme halinde şifreleme
  • Çok faktörlü kimlik doğrulama
  • Rol bazlı erişim kontrolü
  • Tüm değişikliklerin denetim günlükleri
  • Düzenli güvenlik denetimleri
  • Otomatik yedekler

9. International data transfers

The primary database is stored in data centers within the European Union. Some of our service providers are based outside the EU. For these transfers we apply:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Additional technical measures: encryption in transit and at rest, data minimization
  • Transfer Impact Assessments (TIA) where necessary

10. Automated decision-making and AI

Construction Hub uses artificial intelligence to enhance its services:

  • Automatic nomenclature recognition: AI analyzes construction elements from BIM models and maps them to appropriate nomenclature items
  • Price suggestions: AI suggests unit prices based on historical data from your projects
  • Quantity validation: AI checks for anomalies and inconsistencies in extracted quantities

These features do not make automated decisions with legal effects for you. All AI suggestions are subject to manual review and approval by the user. No personal data is sent during AI processing — only technical descriptions of construction elements.

11. Children's data

Construction Hub is a professional construction project management platform. The service is not intended for persons under 16 years of age and we do not knowingly collect data from children. If we discover that we have collected data from a person under 16, we will delete it immediately.

12. Data breach notification

In the event of a personal data security breach, we are committed to:

  • Notifying the Commission for Personal Data Protection (CPDP) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to data subjects' rights
  • Notifying affected data subjects without undue delay when the breach is likely to result in a high risk to their rights and freedoms
  • Documenting every breach, including the circumstances, consequences and measures taken

GDPR kapsamındaki haklarınız

GDPR uyarınca aşağıdaki haklara sahipsiniz:

  • Erişim hakkı — verilerinizin bir kopyasını alın
  • Düzeltme hakkı — yanlış verileri düzeltin
  • Silme hakkı ("unutulma hakkı") — verilerinizi silin
  • İşlemenin kısıtlanması hakkı
  • Veri taşınabilirliği hakkı
  • İtiraz hakkı
  • Otomatik karar verme süreçlerine tabi tutulmama hakkı
  • Şikayet hakkı — denetim makamına

Haklarınızı kullanmak için: info@constructionhub.bg adresinden bize ulaşın

14. Policy changes

We may periodically update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will notify you by email or through a platform notification at least 14 days before the changes take effect. By continuing to use the service after notification, you accept the updated policy.

İletişim

Gizliliğinizle ilgili sorularınız için lütfen bize ulaşın: info@constructionhub.bg

Construction Hub

Sofia, Bulgaria

info@constructionhub.bg

For data protection inquiries: info@constructionhub.bg

If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with:

Commission for Personal Data Protection (CPDP)

2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia

https://www.cpdp.bg

kzld@cpdp.bg

Platformun düzgün çalışmasını sağlamak ve deneyiminizi iyileştirmek için çerezler kullanıyoruz. Çerezler hakkında daha fazla bilgi