Privacy Policy & KVKK

1. Verarbeitete personenbezogene Daten

Depending on your use of our site, the following data is processed:

• Membership data: Name-surname, email address, secure (hash/cryptographic) digest of your password, membership and last login date-time.
• Order data: Name-surname, email, phone (optional), order note, order code, product information, amount, order status, license key, payment/approval dates and download records.
• Contact data: The name, email, subject, and message content you send via the contact form.
• Newsletter data: Only your email address (if you have given explicit consent).
• Transaction security data: IP address (partial/redacted forms), user info (user-agent), session identifiers, CSRF tokens, request rate limit records, preview token records, download logs, and server logs.
• Consent records: Records (with proof obligation) of your explicit consents given for the Terms of Use, Privacy Policy, Distance Sales Agreement, and digital product return/cancellation information, kept along with date-time and IP information.
• Credit card data: It is never processed or stored. Payments are made directly to the bank via bank transfer/EFT.

Verarbeitungsziele und Rechtsgrundlagen

Ihre personenbezogenen Daten werden ausschließlich zu den folgenden Zwecken auf der Grundlage der rechtlichen Gründe in Artikel 5 KVKK verarbeitet:

Processing Purpose	Rechtsgrundlage (DSGVO Art. 6 Abs. 1 lit. f)
Creation and management of the membership account, verification of entries	(c) Conclusion/execution of the contract
Order receipt, payment matching, license key generation, delivery, and download support	(c) Conclusion/execution of the contract
Identity verification in account, order, and download processes to prevent misuse.	(e) Legitimate interest
Proof of explicit consents obtained via checkboxes in the order step	(e) Legitimate interest + legal obligations
The preservation of payment records, accounting and tax obligations	(c) Rechtliche Haftung (VStG, Gesetz Nr. 6563 usw.)
Prevention of cyber security, fraud, and abuse (IP, logs, rate limits)	(e) Legitimate interest
Request/complaint management, support, and communication	(e) Legitimate interest / (c) Contract execution
Newsletter and campaign emails	(a) Explicit consent (in exceptional cases, announcements related to existing membership — legitimate interest)
Information is provided upon request from legal authorities	(c) Legal obligation

Your data, to the extent not necessary for the purposes automated decisions or profiling is not subject to. Sensitive financial data is not collected during payment transactions.

3. Weitergabe personenbezogener Daten

Your data is not sold, rented, or shared with third parties for commercial purposes. It may only be transferred in the limited cases below and to the necessary minimum extent:

• Hosting/server provider: Database and log hosting for the site to operate (domestic/international data center infrastructure). Our server provider has limited access only for technical hosting purposes.
• Bank: Payment records for matching your bank transfer/EFT payment.
• Legal Authorities: Public authorities with obligations arising from court decisions or legislation.
• Advisors: Accounting/legal advisors under legal obligation and confidentiality pledge (only relevant data).

Eine Datenübermittlung ins Ausland erfolgt nur, wenn die in Art. 9 KVKK genannten Bedingungen (ausdrückliche Einwilligung oder Beschluss des Rates/Standardvertragsklauseln) erfüllt sind.

4. Erhebungsmethode und rechtliche Gründe

Your data; through the membership form, order form, contact form, newsletter form, payment notification, session and security mechanisms, server logs, and cookies electronically is collected. Collection is based on the legal reasons listed in the table above and the information/disclosure obligations arising from Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Distance Contracts. If you do not provide all or part of your data, the relevant service (e.g., order delivery or membership) cannot be provided; this is a legal obligation for us and a requirement for service performance.

5. Cookies und ähnliche Technologien

Unsere Seite verwendet notwendige Cookies und Browser-Speicherung, um Ihre Sitzung zu halten, Formulare vor CSRF-Angriffen zu schützen und Sicherheitsprüfungen auszuführen. Details zu Cookie-Typen, Laufzeiten und Verwaltungsoptionen finden Sie auf unserer Cookie-Richtlinie-Seite. Sie können Cookies in Ihren Browsereinstellungen löschen oder blockieren; das Blockieren notwendiger Cookies kann jedoch Login- und Bestellprozesse stören.

6. Aufbewahrungs- und Löschfristen

• Order and payment records: Pursuant to Tax Law 10 Jahr(e); confirmation/proof records are for contract and consumer disputes 10 Jahr(e).
• Membership data: Duration of active membership + after account closure 3 Jahr(e) (legal security); order-related data is stored with order records.
• Contact messages: From the time of response 2 Jahr(e).
• Newsletter records: Until your subscription; upon cancellation request, it is immediately deleted (cancellation records are stored for the legally required period).
• Security logs: 1 Jahr(e) (Einhaltung von Art. 12 DSGVO und Incident Response).
• When time periods expire, data is deleted, destroyed, or anonymized.

7. Datensicherheit

We take technical and administrative measures to protect your data: all site traffic HTTPS/TLS ; passwords are stored with irreversible hash algorithms; the admin panel, sessions, and CSRF protection, request rate-limiting, and IP-based monitoring are protected; the database is kept outside the web root; access is permission-based and logged; software is kept up to date. Despite all precautions, in case of any breach, you and the Authority will be notified as soon as possible pursuant to Article 12 of the KVKK. If you notice anything suspicious, please notify us immediately.

8. Ihre Rechte gemäß Art. 11 KVKK

Gemäß Artikel 11 KVKK können Sie sich an den für die Datenverarbeitung Verantwortlichen wenden:

• Your personal data's learn whether it is being processed,
• If processed, information related to this request information,
• the purpose of processing and its suitability to the purpose learn whether it has been used,
• Data within/outside Turkey know the third parties to whom it has been transferred,
• If processed incorrectly/incompletely its correction verlangen,
• Within the conditions stipulated in the GDPR. deletion or destruction verlangen,
• These processes, to third parties to whom the data is transferred Benachrichtigung verlangen,
• As a result of analysis carried out exclusively by automated systems leading to a result against you object,
• In case of damage caused by unlawful processing Demand compensation for damages you have the right to

9. Beschwerdeweg

You can submit your requests along with information that identifies you info@copypromt.com you can submit it via email to ("KVKK Information Request" subject). Your application; at the latest 30 Tag(e) is responded to free of charge. If the process additionally incurs a cost, the fees specified in the tariff determined by the KVKK Regulation may be applied. In case of rejection of your request, if the response provided is deemed insufficient or if no response is given within the timeframe, from the time we are served with the response, 30 Tag(e) you have the right to file a complaint with the Personal Data Protection Board.

10. Elektronische Werbekommunikation (Gesetz Nr. 6563)

When you subscribe to our newsletter, commercial electronic messages will be sent to your email address for campaign and new product announcements ausdrückliche Zustimmung This confirmation is obtained in accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Electronic Messages and is recorded. You can always withdraw your confirmation, free of charge and without giving any reason: via the unsubscribe link in emails unsubscribe you can click the link or info@copypromt.com you can write to {d}. Withdrawal of consent immediately stops the process. Service announcements related to your membership (order confirmation, license delivery, etc.) are not considered commercial messages and are sent.

11. Personendaten von Kindern

Our services are not directed to individuals under 18. If we discover that someone under 18 has provided us with data, we will delete it without parental consent. If you are a parent and believe your child has shared data with us, please contact us.

12. Änderungen an der Politik

This text may be updated according to legal and operational changes. The current version is always published on this page and is indicated by the "Last update" date at the top of the page. For important changes, a site announcement and/or email notification will be made. Continuing to use the site with the current version means you accept the updated text.