Privacy Policy & GDPR Notice
At Karbonsoft Bilişim A.Ş. ("Karbonsoft", "we"), protecting your personal data is important to us. This policy explains what data we collect, how we use it and what your rights are. It has been prepared within the scope of our responsibilities under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the GDPR.
1. Personal Data Collected
- Account information: Full name, email, company name, phone
- Billing: Tax number, billing address, payment references (we do not store card details)
- Site content data: All content you upload to your site (sliders, products, blog posts, etc.)
- Technical data: IP address, browser information, device type (for analytics)
2. Purposes of Data Processing
- Providing, maintaining and improving the service
- Billing, payment tracking and legal obligations
- Support service
- Security (preventing unauthorized access, fraud detection)
3. Data Retention Period
Your data is processed while your account is active. All data is permanently deleted 30 days after your account closure request. This period may be extended where mandated by law (e.g. the 10-year invoice retention required under tax regulations).
4. Data Sharing
We do not share your personal data with third parties. Exceptions:
- Legal obligations (court order, prosecutor's request)
- Service infrastructure providers (server hosting, email delivery) — these are bound by data protection obligations under contract
5. Your Rights Under KVKK / GDPR
Pursuant to KVKK Article 11:
- Learn whether your data is being processed
- Access your data and request a copy (one click from the admin panel)
- Request correction, deletion or anonymization of your data
- Object to the transfer of your data abroad
- Object if an automated decision results in an outcome against you
6. Data Security
We protect your data with encrypted connections (HTTPS), encrypted database columns and physical + logical access controls. We have regular backup and audit processes.
7. Cookies
We use the following cookie types on our site:
- Essential cookies: Session management, CSRF protection (cannot be disabled)
- Preference cookies: Language selection, theme preference
- Analytics cookies: Anonymous traffic statistics (consent via banner)
8. Contact
For questions about this policy or to request access to your data: kvkk@karbonsoft.tr