KVKK Notice

1. Data Controller

Your personal data is processed by ELECTROCOD ELEKTRONİK YAZILIM SAN. VE TİC. LTD. ŞTİ. as data controller, within the scope explained below. Contact: info@karminax.com — Çiftlikköy Mah. Mersin Üniversitesi Kampüs Alanı Teknopark Sit. No: 35 B / Z08 Merkez-Merkez / Yenişehir / Mersin

2. Categories of Personal Data Processed

• Identity and contact data: full name, business name, email address, phone number.
• Customer transaction data: appointment, package, sales and collection records.
• Transaction security data: username, login records, IP address, device and browser information, cookie data.
• Financial data: subscription and billing information.
• Messaging data: message templates sent over WhatsApp, recipient phone numbers, and message delivery status information.

3. Purposes of Processing Personal Data

• providing the Service, and creating and managing the account;
• carrying out appointment, package, sales and collection processes;
• delivering appointment reminders and notifications;
• carrying out billing and finance/accounting processes;
• carrying out information security processes and improving the Service;
• providing information to authorized persons, institutions and authorities and fulfilling legal obligations;
• carrying out promotional and marketing activities where you have given your explicit consent.

4. Legal Grounds for Processing (KVKK Arts. 5 and 6)

Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:

• processing is directly related to the conclusion or performance of a contract;
• processing is necessary for the data controller to fulfill its legal obligation;
• processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject;
• the explicit consent of the data subject exists, for processing that does not rely on the grounds above.

5. Method of Collecting Personal Data

Your personal data is collected electronically, through the website and application, by automated or partially automated means, during your registration for and use of the Service.

6. Transfer of Personal Data

To the extent necessary to fulfill the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be shared with Meta Platforms Ireland Ltd. for the delivery of WhatsApp messages, with the payment service provider (iyzico) for processing payments, with relevant service providers for hosting and communication services, and with legally authorized public institutions and authorities. As some service providers' servers may be located abroad, your personal data may be transferred abroad with appropriate security measures in place.

7. Retention Period

Your personal data is retained for as long as required by the purpose of processing and for the statutory limitation and retention periods set out in the applicable legislation; upon expiry of these periods, it is deleted, destroyed or anonymized.

8. Rights of the Data Subject (KVKK Art. 11)

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

• learn whether your personal data is being processed,
• request information if it has been processed,
• learn the purpose of processing and whether the data is used in accordance with that purpose,
• know the third parties to whom the data is transferred domestically or abroad,
• request the rectification of your data if it is incomplete or inaccurate,
• request the erasure or destruction of your data within the conditions set out in the KVKK,
• request that rectification, erasure and destruction be notified to third parties to whom the data was transferred,
• object to a result to your detriment arising from the analysis of your data solely by automated systems,
• claim compensation if you suffer damage due to unlawful processing.

9. How to Apply

You may submit requests concerning the rights above, together with information verifying your identity, by contacting info@karminax.com or by applying in writing to Çiftlikköy Mah. Mersin Üniversitesi Kampüs Alanı Teknopark Sit. No: 35 B / Z08 Merkez-Merkez / Yenişehir / Mersin. Your request will be concluded as soon as possible and within thirty (30) days at the latest, in accordance with Article 13 of the KVKK.