Personal Data Protection Notice

Data controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Timya Bilişim ve Yazılım Hizmetleri, which operates the Timyada platform. For personal data that customers enter into their own sites the customer is the controller; Timya Bilişim acts as processor and handles that data solely on the customer's instructions.

Categories of personal data

• Identity: first name, surname, billing name and tax identification details.
• Contact: email address, phone number and billing address.
• Customer transactions: subscription and site records, support tickets and correspondence.
• Transaction security: IP address, sign-in and activity logs, password hash, verification codes.
• Finance: invoice, payment and collection details.

Purposes of processing

• Establishing and performing the contract; creating your account and your site.
• Managing subscriptions, invoicing and collection processes.
• Handling support requests and communicating with customers.
• Ensuring information security and preventing unauthorised access and misuse.
• Fulfilling legal obligations and responding to official requests.
• Measuring service quality and improving the platform.

Legal grounds

• Directly related to the conclusion or performance of a contract (KVKK art. 5/2-c).
• Necessary for the controller to fulfil a legal obligation (KVKK art. 5/2-ç).
• Necessary for the establishment, exercise or protection of a right (KVKK art. 5/2-e).
• Necessary for our legitimate interests, provided your fundamental rights are not harmed (KVKK art. 5/2-f).

How data is collected

Your personal data is collected electronically, by fully or partly automated means, through the registration, subscription, billing and support forms in the portal, through the email and SMS verification flows and through system logs.

Transfers

Your data may be transferred to the suppliers we use for hosting, email and SMS delivery, to our accounting and audit service providers, and to competent public authorities where required by law, in compliance with articles 8 and 9 of the KVKK and limited to the purpose of processing.

Your rights under KVKK art. 11

• To learn whether your personal data is being processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether the data is used accordingly.
• To know the third parties, in Türkiye or abroad, to whom the data is transferred.
• To request correction of incomplete or inaccurate data.
• To request erasure or destruction of the data within the conditions set out in the law.
• To request that correction, erasure or destruction be notified to the third parties to whom the data was transferred.
• To object to a result against you produced solely by automated analysis of the data.
• To claim compensation for damage suffered because of unlawful processing.

How to apply

You can send requests concerning the rights above, together with information verifying your identity, to admin@timyabpm.com, or submit them through the support screen in the portal. Your request is answered free of charge as soon as possible and within thirty days at the latest; if responding involves an additional cost, the fee in the tariff of the Personal Data Protection Board may be charged.

Privacy Policy · Terms of Use