Cookie Policy
Last updated: August 18, 2026 · Version 1.1
This document is provided for convenience; the Turkish version prevails. This Cookie Policy (the "Policy") explains the cookies and similar tracking technologies used in connection with the bluehams.com website, in accordance with the Turkish Personal Data Protection Law No. 6698 (the "Law"), the Guidelines on Cookie Practices published by the Turkish Data Protection Authority in 2022 (the "Guidelines") and other applicable legislation, in keeping with the principle of transparency. Version 1.1 — Effective 17 August 2026. This Policy will be updated whenever the applicable legislation or our cookie inventory changes, and the current version will be published on this page together with its version number and effective date.
Introduction and Scope
This Policy is issued by OYOX LLC (the "Company" or the "Data Controller"), which provides cloud-based management software for hearing aid sales and fitting centers under the BLUEHAMS brand (the "Platform" or the "Service"). The Company is a Domestic Limited Liability Company registered with the New Mexico Secretary of State on 23 February 2026 (Registration No. 0008084103), with its registered address at 1209 Mountain Road PL NE, STE N, Albuquerque, NM 87110, United States.
The Policy covers the cookies and cookie-like technologies (including local storage) used on the bluehams.com domain and all of its sub-pages (the "Site"). With respect to the natural persons (each a "Data Subject") whose personal data ("Personal Data") is processed through cookies, the party acting as data controller is the Company. For general information on the processing of your Personal Data, please see the KVKK Privacy Notice and the Privacy Policy.
What Is a Cookie?
A cookie is a small text file that is stored on the Data Subject's device (computer, smartphone, tablet and the like) by the browser when a website is visited. Cookies may serve various purposes, such as maintaining a session, remembering user preferences, or analyzing site traffic.
By duration, cookies fall into two groups. Session cookies are deleted when the browser is closed; persistent cookies remain on the device for a set period or until the user deletes them. By origin, first-party cookies are set directly by the Site being visited, while third-party cookies are set by other domains.
Cookies We Use (Complete Inventory)
The complete list of cookies used on the Site is set out in the table below. We use no cookie that is not listed in this table.
| Cookie | Purpose | Party | Category | Duration | Consent Status |
|---|---|---|---|---|---|
| --- | --- | --- | --- | --- | --- |
| PHPSESSID (PHP session cookie) | Authentication, session continuity and session security | First party | Strictly necessary | For the session; the session is terminated automatically after 30 minutes of inactivity | No explicit consent required — falls under the authentication cookie exemption in the Guidelines (strictly necessary to provide the Service) |
| hams_lang | Remembering your interface language preference (Turkish/English) | First party | Functional | Persistent; kept until you change your language preference or delete the cookie from your browser | No explicit consent required — falls under the user interface customization (language preference) exemption in the Guidelines; the cookie merely records the language choice you yourself made |
The session cookie is configured with the following technical safeguards for your security. It is flagged HttpOnly (it cannot be read by scripts running in the browser), Secure (it is transmitted only over encrypted HTTPS connections) and SameSite=Lax (providing protection against cross-site request forgery). In addition, sessions with no activity for 30 minutes are terminated automatically on the server side.
The hams_lang cookie holds only the value "tr" or "en"; it contains no information capable of identifying you.
Non-Cookie Local Storage (localStorage)
For the sake of transparency, we note that the Site uses two browser local storage (localStorage) entries which are not cookies.
- hams_theme — stores your dark/light theme preference.
- hams_sidebar — stores the open/closed state of the side menu.
These entries are technically not cookies. Their essential difference from cookies is as follows. The data is kept solely on your own device, in your browser's storage; it is not transmitted to our servers and is not processed by us for any other purpose. The information they contain consists of nothing more than simple preference values relating to the appearance of the interface.
You may delete these entries at any time using your browser's site data clearing feature (usually under "Clear browsing data" or "Site data"). If deleted, your theme and menu preferences revert to the default appearance; the operation of the Site is not affected.
We Use No Analytics, Advertising or Marketing Cookies
The Site uses no analytics, advertising, targeting or marketing cookies whatsoever. No tracking or measurement tool such as Google Analytics or the Meta (Facebook) pixel is embedded in the Site. Your browsing behavior is not profiled, and no data is shared with third parties for advertising purposes.
Because no cookie requiring consent exists, no cookie consent banner is displayed on the Site; this approach is based on the explicit consent exemptions set out in the Guidelines.
Third-Party Content and External Resources
For the sake of transparency, the current arrangement regarding the static resources used to ensure the functional and visual integrity of the Site is explained below.
All static resources of the Site — including stylesheets, fonts, the icon library (Font Awesome) and the charting library in the management panel (Chart.js) — are served locally from the Company's own server under the bluehams.com domain. No resource is loaded from any external content delivery network (CDN); when pages are displayed your browser sends no request to any domain other than bluehams.com, and your IP address is not transmitted to any third party for the loading of site resources. You may verify this at any time via the Network tab of your browser's developer tools.
Collection Method, Legal Basis and Data Location
The Personal Data processed through cookies (the session identifier and the language preference) is collected by fully automated means through the communication between your browser and our servers during your visit to the Site.
The legal bases for the processing, under Article 5/2 of the Law, are as follows.
- Article 5/2-c of the Law — processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract. The session cookie is indispensable for you to log in securely to the panel and for the Service to be provided to you.
- Article 5/2-f of the Law — processing is necessary for the legitimate interests of the Data Controller, provided that the fundamental rights and freedoms of the Data Subject are not harmed. Ensuring session security and offering ease of use by remembering your language preference fall within this scope.
All static resources of the Site — including stylesheets, fonts, the icon library (Font Awesome) and the charting library in the management panel (Chart.js) — are served locally from the Company's own server under the bluehams.com domain. No resource is loaded from any external content delivery network (CDN); when pages are displayed your browser sends no request to any domain other than bluehams.com, and your IP address is not transmitted to any third party for the loading of site resources. You may verify this at any time via the Network tab of your browser's developer tools.
How to Manage Cookies in Your Browser
You can view, delete individually or in bulk, or entirely block cookies through your browser settings. The general path for common browsers is as follows.
- Google Chrome — Settings > Privacy and security > Third-party cookies / Site settings > Cookies and site data.
- Mozilla Firefox — Settings > Privacy & Security > Cookies and Site Data.
- Safari (macOS/iOS) — Settings > Safari > Privacy & Security (iOS) or Safari > Settings > Privacy (macOS).
- Microsoft Edge — Settings > Cookies and site permissions > Manage and delete cookies and site data.
Menu names may vary by version and operating system; please refer to your browser's help pages for current instructions.
Your Rights Under Article 11 of the KVKK and How to Apply
As a Data Subject, under Article 11 of the Law you may exercise the following rights by applying to the Company in its capacity as Data Controller.
- To learn whether your Personal Data is being processed,
- To request information if it has been processed,
- To learn the purpose of the processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom the data is transferred, in Turkey or abroad,
- To request rectification if the data is incomplete or inaccurate,
- To request erasure or destruction of the data under the conditions set out in Article 7 of the Law,
- To request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred,
- To object to a result arising against you through the analysis of the processed data exclusively by automated systems,
- To claim compensation for damages if you suffer harm due to unlawful processing.
You may submit your applications through the following channels.
- Primary channel (post) — in writing by post to the Company's OYOX LLC (USA) address set out above at 1209 Mountain Road PL NE, STE N, Albuquerque, NM 87110, United States,
- Via the application form on the KVKK Application page on bluehams.com,
- Secondary channel (e-mail) — once our e-mail infrastructure is in operation, to kvkk@bluehams.com.
Your application must contain the mandatory elements listed in Article 5/2 of the Communiqué on the Procedures and Principles of Application to the Data Controller (full name, Turkish ID number, address, subject of the request and information serving identity verification); we therefore recommend using the form on the KVKK Application page.
Your application will be concluded free of charge within 30 days at the latest, in accordance with the aforementioned Communiqué; where the operation additionally requires a cost, the current fee schedule set out in the Communiqué applies (currently TRY 1 for each page exceeding ten pages).
Effectiveness and Changes
This Policy entered into force on 17 August 2026 (Version 1.1).
The Policy is updated whenever there is a change in our cookie inventory, in the technologies we use, or in the applicable legislation (including the Law, its secondary regulations and the Authority's guidelines); the current version is published on this page together with its version number and effective date. Material changes will additionally be announced on the Site by reasonable means.
For any questions about cookies, you may contact us primarily through the OYOX LLC (USA) postal address set out above and, once our e-mail infrastructure is in operation, at kvkk@bluehams.com. For comprehensive information on the processing of Personal Data, please see the KVKK Privacy Notice, the Privacy Policy and the Retention and Destruction Policy.