Personal Data Notice (KVKK)

Your personal data is collected electronically, by automated or partly automated means, through the registration form, profile page, file upload screen, support screen, order steps and cookies.

We process your data to open and manage your account, to process the file you upload and provide the output to you, to keep credit and order records and to answer your support requests, because this is necessary for entering into and performing the contract with you (Art. 6(1)(b) GDPR; Art. 5(2)(c) of the Turkish Personal Data Protection Law, KVKK).

Session and security records (IP address, browser information, audit log) are processed to protect your account and the service against unauthorised access and misuse, on the basis of our legitimate interests (Art. 6(1)(f) GDPR; Art. 5(2)(f) KVKK).

Records of the declarations and permissions you give (text version, time, language, IP address) are kept for the establishment, exercise or defence of legal claims (Art. 6(1)(f) GDPR; Art. 5(2)(e) KVKK).

Order and payment records are kept to comply with legal obligations under tax and commercial law (Art. 6(1)(c) GDPR; Art. 5(2)(ç) KVKK).

Marketing communications (offers and announcements) are sent only on the basis of your separate consent (Art. 6(1)(a) GDPR); refusing it does not prevent you from using the service.

Analytics and advertising storage on public pages relies solely on the consent you give in the cookie banner (Art. 6(1)(a) GDPR).

Because database backups are stored on Google Drive and Google tags are used on public pages, your personal data may be transferred to servers outside your country.

Your personal data may be transferred, strictly limited to the purposes above, to the suppliers from whom we obtain server hosting, backup and email services in order to provide the service, to payment institutions for payment transactions, and, in the event of a legal obligation or request, to authorised public institutions and organisations and judicial authorities.

Transfers abroad are made on the basis of one of the conditions set out in KVKK Article 9. Analytics and advertising tags on public pages rely solely on the explicit consent you give in the cookie banner.

Your account and job records are kept for the duration of the contractual relationship and for ten years after it ends, which is the general limitation period.

Order, payment and invoice records are kept for the period required by commercial and tax legislation (ten years); records of consent to marketing communications for three years after the consent is withdrawn; and session and traffic records for the period required by the relevant legislation.

If you ask for your files or your account to be deleted, your request is carried out, except for records that must be kept by law.

Data whose retention period has expired is deleted, destroyed or anonymised.

You have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, to data portability, and to withdraw a consent at any time without affecting the lawfulness of processing carried out before the withdrawal (Arts. 15–21 and 7(3) GDPR; Art. 11 KVKK).

Send your request to the controller's contact details above; requests are answered within one month at the latest. You also have the right to lodge a complaint with a data protection supervisory authority: in the EU, the authority of your place of residence; in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).