**KVKK (TURKISH DATA PROTECTION ACT) NOTICE**
Pursuant to Article 10 of Law No. 6698 on Personal Data Protection (''KVKK''), this notice is prepared by **GNC Arge Danışmanlığı ve Yazılım Hizmetleri Sanayi Ticaret Limited Şirketi** as data controller.
### 1. Data Controller
- Title: GNC Arge Danışmanlığı ve Yazılım Hizmetleri Sanayi Ticaret Limited Şirketi
- Address: Ayazağa Mah. Kemerburgaz Cad. Vadistanbul Park 7C Blok No:7 D, No:15 Sarıyer/İstanbul, Türkiye
- Mersis: 0396163377100001
- Trade Registry: 496230-5
- Tax Office/No: Maslak / 3961633771
- Phone: +90 532 557 99 31
- E-mail: info@shipots.com
- Support: destek@shipots.com
- KEP (TR): gncargedanismanligi@hs06.kep.tr
### 2. Categories of Data Processed
Identity, contact, customer transaction, finance (payment reference and card last-4 — full card data is NOT stored), security/logs, operational data entered into the app.
### 3. Purposes
Performance of subscription contract, payment collection, invoicing, customer support, legal obligations, information security, service improvement, marketing communications (only with explicit consent).
### 4. Legal Basis (KVKK Art. 5)
Contract performance, legal obligation, legitimate interest; explicit consent for marketing.
### 5. Transfer
Payment processor (PayTR), e-invoice integrator, cloud infrastructure provider, public authorities when legally required. Cross-border transfer only with explicit consent or KVKK Art. 9 exceptions.
### 6. Collection Method
Web/mobile forms, e-mail, phone, cookies and system logs via electronic means.
### 7. Rights under Art. 11
Contact info@shipots.com to exercise: information, correction, deletion, notification, objection to automated processing, compensation for unlawful processing. Requests are answered free of charge within 30 days.
### 8. Security
TLS-encrypted traffic, bcrypt password hashing, role-based access control, regular backups, logs, employee NDAs.
### 9. Changes
This notice may be updated; the current version is posted on this page.
Last update: 16 April 2026