Confidentiality and Personal Data Policy
The rules we, as BRANDLİFT REKLAM YAZILIM ARGE HİZMETLERİ ANONİM ŞİRKETİ with Mersis (central registration system) number 0009-1245-5510-0001 (hereinafter referred to as “Cypien”), apply regarding how the personal data we collect, during your visit to our website https://cypien.ai/ (hereinafter referred to as the “Website”), is used, with whom and under what conditions it is shared, how long this data is stored, and how it is protected are detailed below within the scope of our disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 ("PDP Law").
Only your personal data that you approve and/or share directly with us with your explicit consent during your visit to our website is stored. The e-mail address you give us to contact you or your IP address during your visit, your operating system, the browser you use (Chrome, Edge, etc.), your connection time and duration information, and similar information are recorded and stored, if you give your consent, are used for the purpose for which they were given, and are shared with individuals only with your consent. It is always possible to share your data with the relevant and competent authorities within the framework of legal obligations or to use it, provided that it is anonymized.
Although Cypien takes utmost care in storing your information, it is not responsible if your information is obtained, changed or deleted by unauthorized entry into the system where your data is stored, or by disrupting or changing the operation of the system.
Collecting and Processing of Personal Data, and Purposes for Processing:
First of all, your personal data will not be used for purposes other than those stated above without your explicit consent, and will not be shared or transferred to third parties, except for official institutions/organizations and except for legal obligations.
Your Personal Data is generally collected electronically through our website. This collection occurs when you log in to our application, use our products or services, create an account, allow marketing promotions, participate in competitions, surveys or research through social media and other resources.
In addition, your personal data may be collected via telephone, mobile, or internet channels during customer interviews, and electronically, verbally or physically during written and digital applications made to our company.
When you log in to our website or application, information about the devices used such as computers and phones, and technical information such as browsers are also collected.
The ways we collect personal data include information provided by third parties, data obtained from publicly available sources, or information shared by you. This information obtained from third parties is used primarily for security purposes and crime prevention. In collecting this data, we comply with the PDP Law and relevant legislation.Transaction Carried out
Your Personal Data Processed
For online visitors who visit our website:
-Transaction Security Information (IP address, website traffic information, etc.)
- Log Records
For online visitors who fill out the forms on our website:
- Identity Information (name, surname)
- Contact Details (e-mail address, phone number)
For online visitors who request to perform a transaction:
- Identity Information (name, surname, TR ID number, tax ID number, username)
- Contact Details (e-mail address, phone number)
- Financial Information (account information in banks and similar institutions, information about the payment card, invoice, IBAN)
- Legal Information (correspondence with judicial authorities and case/execution file information)
- Transaction Security Information (IP address, website traffic information, risk assessments)
- Log Records
- Customer transaction information (information about incoming and outgoing amounts, information about other transactions made by the user)
- Marketing and other related information (professional information, educational information, preferences and priorities for receiving information for marketing purposes, and information on answers to surveys, etc.)
- Technical information (operator and browser type and version information, login and logout information, information on the tool used, location and time zone information, language preferences information, application and related tools used and their version information, technical identification information, information available on the tool used and other information allowed to be accessed by the user, usage and download information)
Your personal data is processed within the scope of the purposes listed in the table below.
Purpose and/or Activity
Personal Data Categories
Creating a new user record
Ensuring that our services and application operate correctly and that your requests/instructions are processed, managed and fulfilled
Preventing misuse of our services
Communication management and product development, service improvement
Keeping our records up to date and creating transaction profile information of our customers, examining how our customers use our products and services
Carrying out transactions related to payments
Ensuring that payments and fees are well managed and that payments due to us are collected and recovered
Enabling you to enter a prize draw or competition, or complete a survey
Collecting market data to study customers' behavior, including their preferences, interests and how they use our products/services, to determine our marketing campaigns and to grow our business
Proper operation of company services, data analysis and testing, and troubleshooting processes
Managing and protecting our business, website, applications, and social media channels, including prohibitions, troubleshooting, data analysis, testing, system maintenance, support, reporting, and data hosting
Ensuring the effectiveness of advertising and marketing processes
Delivering relevant website content and advertisements to you and measuring or understanding the effectiveness of the advertising we serve to you
Using data analytics to improve our website, products/services, marketing, customer relationships, and experiences
Making suggestions and recommendations to you about products or services that may be of interest to you
Using the services of social media platforms or advertising platforms that will use the personal data they receive for their own purposes, including marketing purposes
Benefiting from the services of financial institutions, crime and fraud prevention companies, and risk measurement companies, which will use the personal data they receive for their own purposes in the capacity of independent controller
Benefiting from the campaign processes or during the campaign creation processes
Being informed about commercial communications and campaigns
Establishing quality management, training, customer management and development processes
Periods in which your personal data will be processed:
In accordance with the PDP Law No. 6698, although your personal data processed for the purposes specified in this "Clarification Text on Personal Data Processing" will be stored for a maximum of 5 (five) years, when the purpose requiring processing in accordance with Article 7/f.1 of the PDP Law no longer exists and/or when the statute of limitations for which we are required to process your data in accordance with the legislation expires, your data will be deleted/destroyed or will continue to be used through anonymization.
Situations where our company may process your personal data without your explicit consent:
In accordance with Article 5 of the PDP Law, we may process your personal data specified above and collected in accordance with the law, without your explicit consent, in the following cases:
If you, as the data owner, are unable to express your consent due to actual impossibility, or in cases where your consent is not given legal validity, it is necessary to process your personal data in order to protect your own or someone else's life or physical integrity;
If processing of personal data belonging to the parties of a contract concluded is necessary, provided that it is directly related to the conclusion or fulfilment of that contract;
If it is mandatory for us to fulfill a legal obligation;
If data processing is mandatory for the establishment, exercise or protection of any right;
If it is necessary to process data for Cypien's legitimate interests, provided that it does not harm your fundamental rights and freedoms.
Parties where your personal data is transferred and purposes of transfer
The table clearly reveals in which cases, to whom and for what purposes your personal data is transferred. For example, data transfer may be based on various legal reasons, such as fulfillment of contractual terms, legal obligations, legitimate interests of the company, or your express consent. This type of table is important to increase the transparency and accountability of our data processing processes.
This data transfer table has been prepared taking into account the legal framework and ethical standards of our data processing activities. It is also designed to ensure that data owners' rights to know how and with whom their data is shared are respected. When any data transfer occurs, action is taken in accordance with relevant legal regulations and best practice standards.
Domestic Service Providers (Banks and similar financial institutions; institutions from which services are received such as auditing and custody; external service provider organizations)
Carrying out storage, preservation, processing, and archive activities, carrying out information security processes, carrying out communication activities, managing customer relations, carrying out demand/complaints/application processes
Authorized Public Institutions and Organizations
Fulfilling lawful requests within the scope of legislation, regulatory and supervisory activities, conducting and concluding alternative dispute resolution methods and litigation processes, and requesting them from the courts
Contracted Law Firm
Preparing for alternative dispute resolution methods and lawsuits and completing these processes
Your Legal Rights:
We undertake to respond to you as soon as possible and within 30 days at the latest, during the processing and finalization of your requests. During this process, we reserve the right to request additional information or documents from you in order to conduct a detailed review.
Amending the Privacy and Personal Data Policy