1. Data Controller
Within the scope of Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Elektromek Technology Inc. ("Company") as the data controller for the purposes and legal reasons explained below.
2. Personal Data Processed
- Identity Information: Name, surname, title
- Contact Information: Email address, phone number, company address
- Account Information: Username, password (hashed), session data
- Transaction Information: Transactions performed on the Platform, log records
- Financial Information: Invoice information, payment history
3. Purposes of Processing Personal Data
- Providing and improving Platform services
- Creating and managing user accounts
- Executing billing and payment processes
- Providing customer support services
- Fulfilling legal obligations
- Planning and implementing information security processes
- Measuring and improving service quality
4. Legal Grounds
Your personal data is processed under Article 5 of KVKK based on the legal grounds of: your explicit consent, the establishment and performance of a contract, the fulfillment of legal obligations, and legitimate interest.
5. Transfer of Personal Data
Your personal data may be transferred to: public institutions within the scope of legal obligations, payment service providers for payment transactions, cloud service providers (Turkey-based data centers) for infrastructure services, and our lawyers in legal proceedings.
6. Data Retention Period
Your personal data is retained for the duration required by the processing purposes and within the legal retention periods. In case of an account closure request, your data is deleted within 30 days, subject to legal obligations.
7. Data Security
AES-256 encryption, two-factor authentication (2FA), SSL/TLS certificates, regular security audits, and access control mechanisms are implemented to ensure the security of your personal data.
8. Data Subject Rights
You have the following rights under Article 11 of KVKK:
- Learning whether your personal data has been processed
- Requesting information if it has been processed
- Learning the purpose of processing and whether it is used in accordance with its purpose
- Knowing the third parties to whom it has been transferred
- Requesting correction if it has been processed incompletely or incorrectly
- Requesting deletion under Article 7 of KVKK
- Objecting to a result arising against you through the analysis of processed data exclusively by automated systems
9. Application
You can submit a written application to kvkk@opredo.com to exercise your rights. Your applications will be responded to free of charge within 30 days at the latest.