Privacy Notice
This Privacy Notice has been prepared by Papara Teknoloji A.Ş. (“Company”) in accordance with the Personal Data Protection Law No. 6698 (“Law”) to explain for which purposes your personal data is processed, with whom it is shared, how it is collected, and your rights, regarding the Laplace products and services offered by the Company.
1 - Data Controller
Your personal data is processed by the Company, residing at Maslak Mah. Taşyoncası Sk. Maslak 1453 Sitesi No: 1g, İç Kapı No: B22, Sarıyer / İstanbul, in its capacity as data controller, within the scope explained below and in compliance with the Law.
2 - Personal Data Processed
The following personal data is processed within the scope of the products and services offered by the Company:
Identity Information: Name, Surname, Turkish ID Number, Address
Contact Information: E-mail, Phone number
Account Information: Device and browser information, IP address
Payment Information: Invoice details, payment method information, transaction history, card information
Legal Information: Correspondence with judicial authorities, lawsuit and consumer arbitration committee file information
Support Communications: Feedback and support messages
Developer Information: API keys, SDK configurations
Transaction Security: Device and browser information, API information
2 - Purposes of Processing Personal Data and Legal Grounds
Purpose of Data Processing
Personal Data Category
Legal Grounds
Establishment and execution of the contract related to the Laplace product and service
Contact Information, Identity Information, Payment Information
Necessity for the establishment and performance of the contract Necessity to fulfill the Company's legal obligations
Receiving, tracking, and managing user requests and complaints
Contact Information, Identity Information, Payment Information
Necessity for the establishment and performance of the contract
Notifying, promoting, and advertising campaigns and products offered by the Company, and managing user relationships for these purposes
Contact Information, Identity Information, Payment Information, Support Communications
Necessity for processing based on legitimate interests of the data controller
Conducting business model and marketing analysis and business development activities
Contact Information, Identity Information, Support Communications
Necessity for processing based on legitimate interests of the data controller
Following up on legal processes
Contact Information, Identity Information, Customer Transaction, Legal Transaction, Account Information, Support Communications
Necessity to fulfill legal obligations, Explicitly stipulated by laws, Necessity for establishment, use, or protection of a right, Necessity for processing based on legitimate interests
Managing transaction and information security processes
Contact Information, Identity Information, Customer Transaction, Legal Transaction, Account Information
Necessity to fulfill legal obligations, explicitly stipulated by laws
Managing storage and archiving processes
Contact Information, Identity Information, Customer Transaction, Legal Transaction, Account Information, Support Communications
Necessity to fulfill legal obligations, explicitly stipulated by laws
4 - Transfer of Personal Data
Your personal data is shared in a limited and proportional manner with the Company’s infrastructure service providers located in Turkey and abroad (Amazon Web Services), payment infrastructure providers, companies providing analytics services (Google Analytics, Hotjar), Borsa İstanbul A.Ş., and e-mail and notification infrastructure providers, in line with the purposes stated above.
The transfer of your data abroad is carried out in compliance with the provisions of the applicable Law.
5 - Retention Period of Personal Data
Your personal data is carefully stored for as long as required by law and in accordance with its purpose of collection. Once the retention period expires, the data is securely deleted, destroyed, or anonymized. Accordingly, API usage records will be stored while your account remains active, support requests will be stored for two (2) years from the date of the last transaction. When the retention period expires, the data will be securely deleted, destroyed, or anonymized.
6 - Changes to the Privacy Notice
This Privacy Notice may be updated by the Company from time to time. If a significant change is made to the Notice, you will be informed via e-mail or other appropriate methods.
7 - Rights of the Data Subject
According to Article 11 of the Law on the Protection of Personal Data (KVKK), as a Data Subject, you have the following rights:
To learn whether your personal data is being processed,
If processed, to request information regarding the processing,
To learn the purpose of processing and whether it is being used in accordance with that purpose,
To know the third parties to whom personal data has been transferred domestically or abroad,
To request correction of personal data if it is incomplete or inaccurate,
To request deletion or destruction of data in accordance with the Law,
To request notification to third parties of any corrections or deletions,
To object to a result against you arising solely from automated processing,
To request compensation if you suffer damages due to unlawful processing of personal data