Privacy Policy

1. Purpose and Scope

1.1. This Privacy Policy (the "Policy") sets out the procedures and principles governing the personal data processed in connection with the use of the website, applications, software, integrations, products and services (collectively, the "Services") offered by Printonus Yazılım Teknolojileri A.Ş. ("Printonus").

1.2. Printonus attaches importance to the privacy and security of its users' personal data and undertakes to process personal data in compliance with the applicable data protection legislation.

1.3. This Policy applies to natural persons, sellers, customers, visitors, business partners and other relevant persons who use the Services.

1.4. Persons using the Services acknowledge that they have read and understood this Policy.

2. Data Controller

2.1. For the purposes of Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Printonus Yazılım Teknolojileri A.Ş.

2.2. The contact details of the data controller are provided at the end of this Policy.

3. Age Restriction for the Services

3.1. Our Services are not directed at persons under the age of 18.

3.2. Printonus does not knowingly collect personal data belonging to children.

3.3. If it is determined that personal data belonging to children has been processed, such data shall be erased, destroyed or anonymized.

4. Personal Data Collected

4.1. The following personal data may be processed in connection with the use of the Services:

• Identity Information: Name, surname, username and similar identity information.
• Contact Information: Telephone number, email address, delivery address and similar contact information.
• Customer Transaction Information: Order information, purchase history, return requests, payment transactions and customer support records.
• Financial Information: Limited information relating to payment transactions, billing information and transaction records.
• Transaction Security Information: IP address, device information, browser information, session records, log records and security data.
• Usage Data: Analytics, performance and interaction information relating to the use of the Services.
• Visual and Content Data: Images, designs, texts, videos and other content uploaded by the user.
• Legal Transaction Information: Dispute records, requests from public authorities and information relating to legal proceedings.

4.2. Content uploaded to the Services by users must not contain special categories of personal data.

4.3. Printonus does not act as data controller with respect to any special categories of personal data contained in content uploaded by users.

5. Methods of Collecting Personal Data

5.1. Personal data may be collected through the following methods:

• Information provided directly by the user
• Creation of an account and use of the Services
• Order processes
• Customer support requests
• Cookies and similar technologies
• Analytics tools
• Social media integrations
• Third-party service providers
• Public institutions and organizations

6. Purposes of Processing Personal Data

6.1. Personal data may be processed for the following purposes:

• Providing and operating the Services
• Managing order processes
• Carrying out payment transactions
• Providing customer support services
• Account management and identity verification processes
• Conducting security processes
• Preventing fraud and misuse
• Measuring and improving service performance
• Improving the user experience
• Fulfilling obligations arising from legislation
• Conducting legal proceedings
• Conducting communication activities
• Conducting marketing and promotional activities

7. Legal Grounds for Processing Personal Data

7.1. Personal data may be processed on the basis of the following legal grounds:

• The existence of explicit consent
• Processing being directly related to the establishment or performance of a contract
• Processing being necessary for the data controller to fulfil its legal obligations
• Processing being necessary for the establishment, exercise or protection of a right
• The legitimate interests of Printonus, provided that the fundamental rights and freedoms of the data subject are not harmed

8. Transfer of Personal Data

8.1. Personal data may be shared with the following parties:

• Production and logistics providers
• Payment institutions
• Cloud computing and hosting providers
• Analytics and security service providers
• Business partners and suppliers
• Public institutions and organizations
• Legal advisors and financial advisors

8.2. Personal data may be transferred to service providers located in Türkiye or abroad for the purpose of providing the Services, subject to security measures in compliance with the applicable data protection legislation.

8.3. Printonus endeavors to implement the necessary technical and administrative security measures during the transfer of personal data.

9. Data Relating to Sellers' End Customers

9.1. Certain customer data may be processed in connection with the provision of products or services on behalf of sellers.

9.2. The data processed in this context may consist of name, surname, delivery address, contact information and order information.

9.3. The Seller acknowledges that the personal data of end customers has been obtained lawfully and that the necessary legal grounds exist for sharing such data.

9.4. Printonus processes customer data processed on behalf of the Seller solely for the purpose of providing the relevant services.

10. Data Retention Periods

10.1. Personal data is retained for the periods prescribed by the relevant legislation or for a reasonable period required by the purposes of processing.

10.2. Upon expiry of the retention period, personal data is erased, destroyed or anonymized in accordance with the applicable legislation.

10.3. Printonus may retain certain data for longer periods for the purposes of resolving legal disputes, fulfilling obligations arising from legislation, preventing fraud risks and protecting its legitimate interests.

11. Information Security

11.1. Printonus implements reasonable technical and administrative measures to ensure the security of personal data.

11.2. Such measures may include access control, authorization systems, security monitoring mechanisms, data encryption methods and system security practices.

11.3. Printonus endeavors to impose the necessary confidentiality obligations on its employees and service providers for the protection of personal data.

11.4. Users are responsible for maintaining the confidentiality of their account information, using strong passwords and managing access to their accounts securely.

11.5. Due to the nature of the internet infrastructure, Printonus does not guarantee that data transmissions are completely secure.

12. Cookies and Similar Technologies

12.1. Cookies and similar technologies may be used in connection with the Services.

12.2. Cookies may be used to remember user preferences, enable session management, apply security measures and measure service performance.

12.3. Detailed information on the use of cookies is set out in the Cookie Policy.

13. User Rights

13.1. Pursuant to Article 11 of the KVKK, users have the following rights:

• To learn whether their personal data is being processed
• To request information if their personal data has been processed
• To learn the purpose of processing
• To know the third parties to whom their data is transferred
• To request the rectification of incomplete or inaccurate data
• To request the erasure or destruction of their data
• To request that the actions taken be notified to third parties
• To object to analysis carried out exclusively through automated systems
• To claim compensation in the event of damage

13.2. Users may submit their requests under the KVKK through the contact details provided below.

13.3. Applications under the KVKK may be made in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller.

14. Sharing with Public Authorities

14.1. Printonus may share personal data with the relevant public authorities pursuant to court decisions, requests from public prosecutors, applications by law enforcement agencies, decisions of administrative authorities or obligations arising from legislation.

15. Third-Party Services

15.1. Third-party service providers, links or integrations may be used in connection with the Services.

15.2. The relevant third parties are responsible for the data processing activities of third-party services.

15.3. Users are advised to review the privacy policies of third-party services separately.

16. Changes to the Policy

16.1. Printonus may update this Policy in line with applicable legislation, operational needs or changes to the services.

16.2. The updated Policy shall enter into force on the date it is published on the website or application.

16.3. In the event of material changes, users may be informed through reasonable means.

17. General Provisions

17.1. This Policy is governed by the laws of the Republic of Türkiye.

17.2. If any provision of this Policy is held invalid, the remaining provisions shall continue in full force and effect.

17.3. Failure by Printonus to exercise any right shall not constitute a waiver of that right.

17.4. Printonus system records, log records, electronic commercial records and digital data may be used as evidence in disputes.

18. Contact Information