KVKK Privacy Notice

This notice summarizes how Panilux processes personal data under Turkish Law No. 6698 (KVKK).

Data Controller

The data controller is Panilux. Contact: [email protected].

Categories of Personal Data

• Identity: name, surname, title
• Contact: email, phone, address
• Customer transaction: orders, licenses, invoicing
• Finance: payments, refunds, collections
• Security: IP, logs, sessions, device info
• Marketing: consent, campaign interactions

Purposes of Processing

• Contracting/fulfilment, license management
• Customer support and notifications
• Billing, collection, accounting
• Security, fraud detection and logging
• Product development, measurement and quality
• With consent, marketing/communications

Legal Bases

• KVKK Art. 5/2(c) contract
• KVKK Art. 5/2(ç) legal obligation
• KVKK Art. 5/2(f) legitimate interests
• KVKK Art. 5/1 consent (for optional processing)

Transfers and Recipients

We may share data with service providers, payment institutions, hosting/infrastructure, legal and financial advisors, and competent authorities. International transfers are made with appropriate safeguards and as permitted under KVKK Art. 9 or with explicit consent.

Method of Collection

Via web panel, mobile app, API, support channels and integrations by automated or semi-automated means; and via contractual/offer processes in physical/electronic form. For cookies and online tracking, see the Privacy Policy.

Retention and Erasure

Data is kept for statutory and contractual periods, then erased or anonymized. Logs and billing data are kept for periods required by law.

Illustrative periods; exact durations depend on applicable law.

Category	Typical Period
Billing/Accounting	10 years
Support Records	3 years
Log Records	2 years
Backups	90 days
Marketing	Until consent is withdrawn

See retention details: Data Retention Policy

Data Subject Rights

For rights under KVKK Art. 11, contact [email protected].

Updates

We may update this notice; the current version is published on panilux.com.