This English version is provided for information purposes. In case of any discrepancy, the Turkish version shall prevail.
1. Data Controller
Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"), your personal data is processed by Metaiosoft Software & Consulting as data controller as described below.
| Company | Metaiosoft Software & Consulting (Metaiosoft Yazılım & Danışmanlık) |
|---|---|
| Responsible | Selçuk Yaşar |
| Address | Üçevler Mh. Tanay Cd. No:23/3 Office: 20, 16120 Nilüfer / Bursa, Türkiye |
| Tax Office / No | Çekirge Tax Office / 48928010978 |
| info [at] metaiosoft.com | |
| Website | https://www.metaiosoft.com |
2. Personal Data Processed
- Identity and contact: Name, surname, company name, tax office and number, email address, phone, billing address.
- Customer transactions: Order and subscription details, invoice records, support requests and correspondence.
- Financial: Payment amount, transaction date, order/transaction reference and payment result. Card data such as card number, expiry date and CVV never reach or are stored on our systems; they are processed directly by the licensed payment institution Paynkolay.
- Transaction security: IP address, session and access logs, browser and device information.
- Website usage: Visit statistics collected via cookies (see the Privacy & Security Policy).
3. Method of Collection
Personal data is collected by automated or partly automated means through forms on our website, the payment page, email and phone correspondence, the use of our software, and cookies.
4. Purposes and Legal Grounds
- Concluding and performing the distance sales agreement, activating accounts and licences, managing subscriptions, technical support — performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b))
- Billing, accounting and tax obligations, responding to requests of competent authorities — legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c))
- Establishing, exercising or defending legal claims — KVKK Art. 5/2-e; GDPR Art. 6(1)(f)
- Ensuring information and system security, preventing misuse, measuring and improving service quality — legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f))
5. Transfers of Personal Data
Limited to the purposes above and in accordance with Articles 8 and 9 KVKK, personal data may be shared with: the payment institution (Paynkolay), e-invoice/e-archive integrators and accounting service providers, hosting and infrastructure providers, and legally authorised public authorities (Turkish Revenue Administration, judicial authorities, etc.).
Due to the use of Google Analytics on our website and of certain cloud and email infrastructure services, data may be transferred to servers located abroad. Such transfers are carried out subject to the conditions and safeguards set out in Article 9 KVKK.
6. Retention
Personal data is retained for as long as required by the purpose of processing and by applicable legislation. Commercial books, documents and invoices are retained for 10 years under the Turkish Commercial Code and Tax Procedure Law; transaction security logs are retained for 2 years. After that, the data is deleted, destroyed or anonymised.
7. Your Rights
Under Article 11 KVKK you have the right to: learn whether your personal data is processed and request information about it; learn the purpose of processing and whether data is used accordingly; know the third parties in Türkiye or abroad to whom data is transferred; request rectification of incomplete or inaccurate data; request erasure or destruction under Article 7 KVKK; request that rectification or erasure be notified to third parties to whom data was transferred; object to a result to your detriment arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing.
If the GDPR applies to you (Art. 3(2) GDPR), you also have the rights of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence.
8. How to Apply
You can submit your requests in writing to our address above, via registered electronic mail (KEP), with a secure electronic or mobile signature, or from the email address registered with us to info [at] metaiosoft.com. Requests are answered free of charge within 30 days at the latest; if the request entails an additional cost, the fee set by the Turkish Personal Data Protection Board may apply. If your request is rejected or you find the response insufficient, you may lodge a complaint with the Personal Data Protection Board.