KVKK

Effective Date: 10.11.2025

# Personal Data Protection and Privacy Notice

This Personal Data Protection and Privacy Notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Obligation to Inform.

## 1. Data Controller

Within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), the website operator (hereinafter referred to as the “Company”) acts as the **Data Controller** regarding the processing of personal data collected through this website.

## 2. Personal Data Collected

When purchasing products or services through this website, the following personal data may be collected from customers:

* Name and surname

* Company name (if applicable)

* Email address

* Phone number

* Billing address

* Other billing information required for invoicing

This website **does not collect, process, or store credit card information**.

All payment transactions are processed securely through the **iyzico payment infrastructure** on its own payment page.

## 3. Purpose of Processing Personal Data

Collected personal data are processed solely for the following purposes:

* Completing the purchase transaction

* Issuing invoices and fulfilling legal financial obligations

* Delivering license information related to purchased digital products

* Sending purchase confirmations and invoices to the customer via email

* Providing customer support related to the purchase

Personal data are **not used for marketing purposes** and **are not shared with third parties** except where legally required.

## 4. Method and Legal Basis for Collecting Personal Data

Personal data are collected electronically through:

* Order forms on the website

* Communication forms used during the purchase process

Personal data are processed based on the legal grounds specified in Article 5 of KVKK, including:

* Processing being necessary for the **performance of a contract**

* Processing being necessary for the **data controller to fulfill its legal obligations**

## 5. Transfer of Personal Data

Personal data collected through this website are **not transferred to third parties** except:

* To authorized public institutions and authorities when required by law

* To payment service providers only to the extent necessary to complete the payment transaction

Credit card information is processed **directly by the iyzico payment system** and is **never stored or processed by this website**.

## 6. Cookies

This website uses cookies to ensure the proper functioning of the website and to improve user experience.

When visiting the website, users may see the following notification:

"This website uses cookies to ensure you get the best user experience on our website."

Detailed information regarding the use of cookies can be found on the **Cookies Information Page**, accessible via the **“More Info”** link in the cookie notification.

## 7. Retention Period

Personal data collected for invoicing and licensing purposes are retained only for the duration required by relevant tax and commercial legislation and are securely stored during this period.

After the expiration of the legal retention period, the data are deleted, destroyed, or anonymized in accordance with applicable legislation.

## 8. Rights of Data Subjects

According to Article 11 of the Turkish Personal Data Protection Law (KVKK), data subjects have the right to:

* Learn whether their personal data are being processed

* Request information if their personal data have been processed

* Learn the purpose of processing and whether data are used in accordance with that purpose

* Learn the third parties to whom personal data are transferred

* Request correction of incomplete or inaccurate data

* Request deletion or destruction of personal data under the conditions set forth in KVKK

* Request notification of correction or deletion to third parties to whom personal data have been transferred

* Object to the occurrence of a result against the person by analyzing processed data exclusively through automated systems

Requests regarding these rights may be submitted to the Company through the communication channels available on this website.

## 9. Updates

This Privacy Notice may be updated when necessary in order to comply with legal requirements or operational changes. The most current version will always be published on this website.