Privacy Policy and KVKK Disclosure Statement

Your personal data is processed by Stokzone Pazaryeri Entegrasyonu Limited Şirketi ("Stokzone", the "Company", "we"), in its capacity as data controller, within the scope explained below.

• Legal title: Stokzone Pazaryeri Entegrasyonu Limited Şirketi
• E-mail: [email protected]
• Web: stokzone.com / app.stokzone.com

Depending on how you use our services, the following categories of personal data may be processed:

• Account and identity information: name and surname, e-mail address and other information you provide when creating an account.
• Billing and subscription information: your subscription plan, billing details and transaction records relating to payment.
• Usage and log data: technical records generated while you use the service (IP address, session information, transaction and error logs).
• Integration credentials you connect: API keys, usernames, passwords and similar access information belonging to your marketplace, e-commerce, shipping and accounting accounts.

In order for the service to function, we need to store the API credentials (key, username, password, etc.) belonging to the marketplace, e-commerce, shipping and accounting platforms you connect.

These access credentials are stored in encrypted form and are used solely for the purpose of running the relevant integration. Such information remains yours; you may stop its use at any time by removing the relevant integration.

Your personal data is processed for the following purposes:

• Creating your account, verifying your identity and providing your access to the service.
• Setting up and running marketplace, e-commerce, shipping and accounting integrations.
• Carrying out order, stock, price, return and invoicing operations.
• Managing subscription and billing processes.
• Responding to your support requests and communicating with you.
• Ensuring the security of the service, detecting errors and misuse, and fulfilling obligations arising from the applicable legislation.

Your personal data is processed on the basis of the legal grounds set out in Articles 5 and 6 of the KVKK. The principal grounds are: being directly related to the conclusion or performance of a contract, enabling our Company to fulfil its legal obligations, the establishment, exercise or protection of a right, and being necessary for the legitimate interests of our Company provided that it does not harm the data subject's fundamental rights and freedoms. Where required, your explicit consent is obtained.

Your personal data is retained for the period necessary for the purpose for which it is processed, taking into account the statute of limitations and retention periods stipulated in the relevant legislation. When the purpose of processing ceases to exist and the statutory retention periods expire, your data is deleted, destroyed or anonymized.

Your personal data may be transferred, to the extent and for the purpose of providing the service, to our service providers that carry out services such as hosting/infrastructure, e-mail delivery and payment. Such transfers are limited solely to the scope required by the relevant service.

In addition, where requested by authorized public institutions and organizations pursuant to the applicable legislation, your data may be shared with the relevant authorities within the framework of our legal obligations. Your data is not sold to third parties for purposes other than those stated in this statement.

Appropriate technical and administrative measures are taken to prevent the unlawful processing of and unauthorized access to your personal data and to ensure its safekeeping. The integration access credentials you connect are stored in encrypted form.

Pursuant to Article 11 of the KVKK, by applying to the data controller you have the following rights:

• To learn whether your personal data is being processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties, within the country or abroad, to whom the data is transferred.
• To request rectification if it has been processed incompletely or inaccurately.
• To request its erasure or destruction within the framework of the conditions set out in the legislation.
• To request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred.
• To object to a result arising against you as a consequence of the data being analyzed exclusively through automated systems.
• To request the remedy of any damage you suffer due to unlawful processing.

You may submit your requests regarding the above rights to us by sending an e-mail to [email protected]. Your applications are concluded within the periods stipulated in the KVKK and the relevant legislation.