GİZLİLİK VE KİŞİSEL VERİLERİN KORUNMASI POLİTİKASI
1. INTRODUCTION AND DATA CONTROLLER
As Nywhash Yazılım Limited Şirketi (“Nywhash” or “Company”), we attach the highest level of importance to the protection and privacy of our users' personal data. This policy explains the data processing activities carried out by Nywhash as the data controller in accordance with the Law on Protection of Personal Data No. 6698 (“KVKK”).
Address: Sarıcalar Mah. Yakamoz St. No: 5/1 Silifke / Mersin / Turkey
Trade Registry No: 6098
MERSIS No: 0632144748000001
Tax Office & No: 6321447480
Email: privacy@nywhash.com
2. DEFINITIONS
- Personal Data: Any information relating to an identified or identifiable natural person.
- Data Processing: Any operation performed on data, such as obtaining, recording, or storing personal data.
- Data Subject: The natural person whose personal data is processed.
- KVKK: Law No. 6698 on the Protection of Personal Data (Turkish legislation).
3. COLLECTED PERSONAL DATA
Nywhash may collect the following categories of data during the execution of services:
- Identity Info: Name, surname, date of birth, National ID Number (for billing processes).
- Contact Info: Email address, phone number, physical address.
- Customer Transaction Info: Order history, request/complaint records, support tickets.
- Financial Info: Tax office/number, masked payment instrument details.
- Transaction Security Info: IP address, log records, login-logout timestamps.
4. PURPOSES OF DATA PROCESSING
Your personal data is processed for the following purposes:
- Execution of contract processes and provision of services.
- Tracking financial and accounting affairs (Invoicing).
- Customer relationship management and technical support processes.
- Execution of activities in accordance with the legislation and meeting official authority requests.
- Execution of information security processes.
5. LEGAL GROUNDS
Your personal data is processed based on the following legal grounds specified in Article 5 of the KVKK:
- Explicitly provided for in the laws.
- Directly related to the establishment or performance of a contract.
- Mandatory for the data controller to fulfill their legal obligations.
- Mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
6. DATA TRANSFER AND SHARING
Nywhash never sells your personal data to third parties for advertising or marketing purposes. Your data can only be transferred to the following groups of recipients:
- Business Partners: Payment institutions (PayTR, iyzico, etc.), cloud computing providers.
- Authorized Public Authorities: Tax offices, courts, or law enforcement units (in case of legal obligation).
- External Service Providers: Cargo companies, legal consultancy firms.
8. DATA SECURITY MEASURES
Nywhash takes the following technical and administrative measures to ensure the security of your data:
- All data transfers are protected with 256-bit SSL encryption.
- Databases are regularly backed up and stored encrypted.
- Our staff receives regular training on data privacy and security.
- Regular penetration tests and security scans are conducted on our systems.
9. RIGHTS OF THE DATA SUBJECT
As data subjects, you have the following rights under Article 11 of the KVKK:
- To learn whether your personal data is being processed.
- To request information if your personal data has been processed.
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose.
- To request correction if your personal data is processed incompletely or incorrectly.
- To request deletion or destruction of personal data within the framework of the conditions provided in the KVKK.
10. DATA RETENTION AND DESTRUCTION
Your personal data is stored for the period stipulated in the relevant legislation or required for the purpose for which they are processed. Upon expiry of the periods or disappearance of the purpose of processing, your data is deleted or anonymized within the framework of the Nywhash Destruction Policy.
11. POLICY CHANGES
Nywhash reserves the right to update this text due to changes in legal regulations or company policies. The updated text becomes effective on the date it is published on our website.
12. CONTACT AND APPLICATION
You can submit your requests regarding your personal data in writing or via registered electronic mail (KEP) address.
Response Time: Your request will be finalized within 30 (thirty) days at the latest.