Privacy Policy & KVKK

1. Dati Personelli che Elaboriamo

Depending on your use of our site, the following data is processed:

• Membership data: Name-surname, email address, secure (hash/cryptographic) digest of your password, membership and last login date-time.
• Order data: Name-surname, email, phone (optional), order note, order code, product information, amount, order status, license key, payment/approval dates and download records.
• Contact data: The name, email, subject, and message content you send via the contact form.
• Newsletter data: Only your email address (if you have given explicit consent).
• Transaction security data: IP address (partial/redacted forms), user info (user-agent), session identifiers, CSRF tokens, request rate limit records, preview token records, download logs, and server logs.
• Consent records: Records (with proof obligation) of your explicit consents given for the Terms of Use, Privacy Policy, Distance Sales Agreement, and digital product return/cancellation information, kept along with date-time and IP information.
• Credit card data: It is never processed or stored. Payments are made directly to the bank via bank transfer/EFT.

2. Finalità del Trattamento e Base Giuridica

I tuoi dati personali vengono elaborati solo per i seguenti scopi, in base alle basi giuridiche di cui all'art. 5 della KVKK:

Processing Purpose	Base Giuridica (art. 5/2 KVKK)
Creation and management of the membership account, verification of entries	(c) Conclusion/execution of the contract
Order receipt, payment matching, license key generation, delivery, and download support	(c) Conclusion/execution of the contract
Identity verification in account, order, and download processes to prevent misuse.	(e) Legitimate interest
Proof of explicit consents obtained via checkboxes in the order step	(e) Legitimate interest + legal obligations
The preservation of payment records, accounting and tax obligations	(c) Responsabilità legale (VUK, Legge n. 6563, ecc.)
Prevention of cyber security, fraud, and abuse (IP, logs, rate limits)	(e) Legitimate interest
Request/complaint management, support, and communication	(e) Legitimate interest / (c) Contract execution
Newsletter and campaign emails	(a) Explicit consent (in exceptional cases, announcements related to existing membership — legitimate interest)
Information is provided upon request from legal authorities	(c) Legal obligation

Your data, to the extent not necessary for the purposes automated decisions or profiling is not subject to. Sensitive financial data is not collected during payment transactions.

3. Condivisione dei Dati Personali

Your data is not sold, rented, or shared with third parties for commercial purposes. It may only be transferred in the limited cases below and to the necessary minimum extent:

• Hosting/server provider: Database and log hosting for the site to operate (domestic/international data center infrastructure). Our server provider has limited access only for technical hosting purposes.
• Banca: Payment records for matching your bank transfer/EFT payment.
• Legal Authorities: Public authorities with obligations arising from court decisions or legislation.
• Advisors: Accounting/legal advisors under legal obligation and confidentiality pledge (only relevant data).

If data transfer abroad is necessary, it will not be made without meeting the conditions in KVKK Art. 9 (explicit consent or Board decision/standard contract procedures).

4. Metodo di Raccolta e Motivazione Legale

Your data; through the membership form, order form, contact form, newsletter form, payment notification, session and security mechanisms, server logs, and cookies electronically is collected. Collection is based on the legal reasons listed in the table above and the information/disclosure obligations arising from Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Distance Contracts. If you do not provide all or part of your data, the relevant service (e.g., order delivery or membership) cannot be provided; this is a legal obligation for us and a requirement for service performance.

5. Cookie e tecnologie simili

Il nostro sito utilizza cookie strettamente necessari e l'archiviazione del browser per mantenere la sessione, proteggere i moduli dagli attacchi CSRF ed eseguire i controlli di sicurezza. I dettagli su tipi di cookie, durate e opzioni di gestione sono nella nostra Cookie Policy. Puoi eliminare o bloccare i cookie dalle impostazioni del browser; tuttavia, bloccare i cookie necessari può compromettere l'accesso e i processi d'ordine.

6. Periodi di Conservazione e Distruzione

• Order and payment records: Pursuant to Tax Law 10 anno; confirmation/proof records are for contract and consumer disputes 10 anno.
• Membership data: Duration of active membership + after account closure 3 anno (legal security); order-related data is stored with order records.
• Contact messages: From the time of response 2 anno.
• Newsletter records: Until your subscription; upon cancellation request, it is immediately deleted (cancellation records are stored for the legally required period).
• Security logs: 1 anno (conformità all'art. 12 del GDPR e intervento in caso di incidente).
• When time periods expire, data is deleted, destroyed, or anonymized.

7. Sicurezza dei Dati

We take technical and administrative measures to protect your data: all site traffic HTTPS/TLS ; passwords are stored with irreversible hash algorithms; the admin panel, sessions, and CSRF protection, request rate-limiting, and IP-based monitoring are protected; the database is kept outside the web root; access is permission-based and logged; software is kept up to date. Despite all precautions, in case of any breach, you and the Authority will be notified as soon as possible pursuant to Article 12 of the KVKK. If you notice anything suspicious, please notify us immediately.

8. I tuoi diritti ai sensi dell'art. 11 del GDPR

Inviando una richiesta al responsabile del trattamento ai sensi dell'art. 11 KVKK;

• Your personal data's learn whether it is being processed,
• If processed, information related to this request information,
• the purpose of processing and its suitability to the purpose learn whether it has been used,
• Data within/outside Turkey know the third parties to whom it has been transferred,
• If processed incorrectly/incompletely its correction richiesta,
• Within the conditions stipulated in the GDPR. deletion or destruction richiesta,
• These processes, to third parties to whom the data is transferred notifica richiesta,
• As a result of analysis carried out exclusively by automated systems leading to a result against you object,
• In case of damage caused by unlawful processing Demand compensation for damages you have the right to

9. Modalità di Presentazione della Domanda

You can submit your requests along with information that identifies you info@copypromt.com you can submit it via email to ("KVKK Information Request" subject). Your application; at the latest 30 giorno is responded to free of charge. If the process additionally incurs a cost, the fees specified in the tariff determined by the KVKK Regulation may be applied. In case of rejection of your request, if the response provided is deemed insufficient or if no response is given within the timeframe, from the time we are served with the response, 30 giorno you have the right to file a complaint with the Personal Data Protection Board.

10. Comunicazioni Elettroniche Commerciali (Legge n. 6563)

When you subscribe to our newsletter, commercial electronic messages will be sent to your email address for campaign and new product announcements explicit consent This confirmation is obtained in accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Electronic Messages and is recorded. You can always withdraw your confirmation, free of charge and without giving any reason: via the unsubscribe link in emails unsubscribe you can click the link or info@copypromt.com you can write to {d}. Withdrawal of consent immediately stops the process. Service announcements related to your membership (order confirmation, license delivery, etc.) are not considered commercial messages and are sent.

11. Dati Personali dei Bambini

Our services are not directed to individuals under 18. If we discover that someone under 18 has provided us with data, we will delete it without parental consent. If you are a parent and believe your child has shared data with us, please contact us.

12. Modifiche alla Politica

This text may be updated according to legal and operational changes. The current version is always published on this page and is indicated by the "Last update" date at the top of the page. For important changes, a site announcement and/or email notification will be made. Continuing to use the site with the current version means you accept the updated text.