Privacy Policy & KVKK

1. Données personnelles que nous traitons

Depending on your use of our site, the following data is processed:

• Membership data: Name-surname, email address, secure (hash/cryptographic) digest of your password, membership and last login date-time.
• Order data: Name-surname, email, phone (optional), order note, order code, product information, amount, order status, license key, payment/approval dates and download records.
• Contact data: The name, email, subject, and message content you send via the contact form.
• Newsletter data: Only your email address (if you have given explicit consent).
• Transaction security data: IP address (partial/redacted forms), user info (user-agent), session identifiers, CSRF tokens, request rate limit records, preview token records, download logs, and server logs.
• Consent records: Records (with proof obligation) of your explicit consents given for the Terms of Use, Privacy Policy, Distance Sales Agreement, and digital product return/cancellation information, kept along with date-time and IP information.
• Credit card data: It is never processed or stored. Payments are made directly to the bank via bank transfer/EFT.

2. Finalités du traitement et bases juridiques

Vos données personnelles ne sont traitées qu'aux fins suivantes, sur la base des motifs juridiques prévus à l'article 5 de la KVKK :

Processing Purpose	Base légale (Art. 5/2 du RGPD)
Creation and management of the membership account, verification of entries	(c) Conclusion/execution of the contract
Order receipt, payment matching, license key generation, delivery, and download support	(c) Conclusion/execution of the contract
Identity verification in account, order, and download processes to prevent misuse.	(e) Legitimate interest
Proof of explicit consents obtained via checkboxes in the order step	(e) Legitimate interest + legal obligations
The preservation of payment records, accounting and tax obligations	(c) Responsabilité légale (VUK, loi n° 6563, etc.)
Prevention of cyber security, fraud, and abuse (IP, logs, rate limits)	(e) Legitimate interest
Request/complaint management, support, and communication	(e) Legitimate interest / (c) Contract execution
Newsletter and campaign emails	(a) Explicit consent (in exceptional cases, announcements related to existing membership — legitimate interest)
Information is provided upon request from legal authorities	(c) Legal obligation

Your data, to the extent not necessary for the purposes automated decisions or profiling is not subject to. Sensitive financial data is not collected during payment transactions.

3. Transfert de données personnelles

Your data is not sold, rented, or shared with third parties for commercial purposes. It may only be transferred in the limited cases below and to the necessary minimum extent:

• Hosting/server provider: Database and log hosting for the site to operate (domestic/international data center infrastructure). Our server provider has limited access only for technical hosting purposes.
• Banque : Payment records for matching your bank transfer/EFT payment.
• Legal Authorities: Public authorities with obligations arising from court decisions or legislation.
• Advisors: Accounting/legal advisors under legal obligation and confidentiality pledge (only relevant data).

En cas de nécessité de transfert de données à l'étranger, ce transfert ne sera effectué qu'en respectant les conditions de l'article 9 de la KVKK (consentement exprès ou décision du Conseil/procédures contractuelles standard).

4. Méthode de collecte et raisons légales

Your data; through the membership form, order form, contact form, newsletter form, payment notification, session and security mechanisms, server logs, and cookies electronically is collected. Collection is based on the legal reasons listed in the table above and the information/disclosure obligations arising from Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Distance Contracts. If you do not provide all or part of your data, the relevant service (e.g., order delivery or membership) cannot be provided; this is a legal obligation for us and a requirement for service performance.

5. Cookies et technologies similaires

Notre site utilise des cookies strictement nécessaires et le stockage du navigateur pour maintenir votre session, protéger les formulaires contre les attaques CSRF et exécuter les contrôles de sécurité. Les détails sur les types de cookies, leurs durées et les options de gestion figurent sur notre Politique en matière de cookies. Vous pouvez supprimer ou bloquer les cookies dans les paramètres de votre navigateur ; toutefois, le blocage des cookies nécessaires peut perturber la connexion et le processus de commande.

6. Durées de conservation et de destruction

• Order and payment records: Pursuant to Tax Law 10 an; confirmation/proof records are for contract and consumer disputes 10 an.
• Membership data: Duration of active membership + after account closure 3 an (legal security); order-related data is stored with order records.
• Contact messages: From the time of response 2 an.
• Newsletter records: Until your subscription; upon cancellation request, it is immediately deleted (cancellation records are stored for the legally required period).
• Security logs: 1 an (conformité à l'article 12 de la loi KVKK et intervention en cas d'incident).
• When time periods expire, data is deleted, destroyed, or anonymized.

7. Sécurité des données

We take technical and administrative measures to protect your data: all site traffic HTTPS/TLS ; passwords are stored with irreversible hash algorithms; the admin panel, sessions, and CSRF protection, request rate-limiting, and IP-based monitoring are protected; the database is kept outside the web root; access is permission-based and logged; software is kept up to date. Despite all precautions, in case of any breach, you and the Authority will be notified as soon as possible pursuant to Article 12 of the KVKK. If you notice anything suspicious, please notify us immediately.

8. Vos droits dans le cadre de l'article 11 de la KVKK

En tant que responsable de traitement, vous avez le droit, conformément à l'article 11 du RGPD, de demander :

• Your personal data's learn whether it is being processed,
• If processed, information related to this request information,
• the purpose of processing and its suitability to the purpose learn whether it has been used,
• Data within/outside Turkey know the third parties to whom it has been transferred,
• If processed incorrectly/incompletely its correction demande,
• Within the conditions stipulated in the GDPR. deletion or destruction demande,
• These processes, to third parties to whom the data is transferred notification demande,
• As a result of analysis carried out exclusively by automated systems leading to a result against you object,
• In case of damage caused by unlawful processing Demand compensation for damages you have the right to

9. Voie de recours

You can submit your requests along with information that identifies you info@copypromt.com you can submit it via email to ("KVKK Information Request" subject). Your application; at the latest 30 jour is responded to free of charge. If the process additionally incurs a cost, the fees specified in the tariff determined by the KVKK Regulation may be applied. In case of rejection of your request, if the response provided is deemed insufficient or if no response is given within the timeframe, from the time we are served with the response, 30 jour you have the right to file a complaint with the Personal Data Protection Board.

10. Communications électroniques commerciales (loi n° 6563)

When you subscribe to our newsletter, commercial electronic messages will be sent to your email address for campaign and new product announcements consentement exprès This confirmation is obtained in accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Electronic Messages and is recorded. You can always withdraw your confirmation, free of charge and without giving any reason: via the unsubscribe link in emails unsubscribe you can click the link or info@copypromt.com you can write to {d}. Withdrawal of consent immediately stops the process. Service announcements related to your membership (order confirmation, license delivery, etc.) are not considered commercial messages and are sent.

11. Données personnelles des enfants

Our services are not directed to individuals under 18. If we discover that someone under 18 has provided us with data, we will delete it without parental consent. If you are a parent and believe your child has shared data with us, please contact us.

12. Modifications de la politique

This text may be updated according to legal and operational changes. The current version is always published on this page and is indicated by the "Last update" date at the top of the page. For important changes, a site announcement and/or email notification will be made. Continuing to use the site with the current version means you accept the updated text.