As data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), Codelytic Teknoloji Hiz. Ltd. Şti. (the “Company”) processes your personal data as described below.
Data we process
- Identity and contact: name, email, phone.
- Customer transactions: company name, tax office and number, billing address, order and subscription records.
- Security: IP address, browser information, session records, sign-in attempts.
- Finance: payment amount, payment method type, the payment provider's transaction ID. Card details are not stored by the Company; they are processed by the payment provider.
Portal data
Business data that you or your ERP system enter into your portal (products, customers, orders, invoices, account movements) is processed on your behalf and on your instructions; we do not use it for any purpose other than providing the service.
To check that the service calculates correctly, we regularly run automated, read-only integrity checks on your portal data (e.g. that an order's total equals the sum of its lines). These checks do not change your data. Their results contain only the number of inconsistencies per rule; they do not contain record content (company names, amounts, order or invoice numbers). If an inconsistency is found, its cause is investigated by our authorised technical staff.
Purposes and legal grounds
| Purpose | Legal ground (KVKK art. 5) |
|---|---|
| Opening accounts, setting up and providing the service | Performance of a contract |
| Invoicing and accounting records | Legal obligation |
| Security and abuse prevention | Legitimate interest |
| Checking that the service works correctly (automated integrity checks) | Performance of a contract, legitimate interest |
| Service notifications (renewal, suspension) | Performance of a contract |
Transfers
Data may be transferred only as far as the service requires: to the payment institution and bank providing our card payment service (iyzico Ödeme Hizmetleri A.Ş., Türkiye Garanti Bankası A.Ş.), the email delivery provider (SMTP2GO), hosting and content delivery providers, and competent public authorities. Transfers to providers located abroad are made in accordance with KVKK art. 9.
Retention
Account and subscription data is kept during the contract and afterwards for the statutory retention periods; portal content is deleted after the subscription ends and is also removed from backup copies within the backup cycle. Security and activity logs may be kept for the period required by law. Anonymous usage statistics that cannot be linked to a person may be kept after the subscription ends.
Your rights
Under KVKK art. 11 you have the right to learn whether your data is processed, request information, rectification and erasure, object, and claim compensation. Send requests to [email protected] or [email protected].
Contact
Codelytic Teknoloji Hiz. Ltd. Şti. · İstasyon Mah. Yarımburgaz Cad. İstasyon 24 Rezidans No: 31 İç Kapı No: 65, 34303 Küçükçekmece / İstanbul · [email protected]