Privacy & Cookie Policy

01 Data Controller

Under GDPR and Turkey's Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed as described below by OMRAR SOFTWARE LTD, acting as the data controller.

02 Personal Data Collected

The following personal data may be collected through our website and services:

2.1 Via Contact Form

• Identity information: first name, last name
• Contact information: email address, phone number
• Message content: request/question text

2.2 During Invoice and Quote Processes

• Customer/company info: company name, tax number, MERSIS no, address
• Financial info: invoice amount, payment status, bank/IBAN info (only if shared by you)

2.3 Automatically Collected

• Transaction security data: IP address, browser info (user agent), pages visited, visit time
• Via cookies: session identifier, language/theme preference, consent status

03 Processing Purposes

Your personal data is processed for the following purposes under KVKK Art. 5 & 6 and GDPR Art. 6:

• Responding to questions/requests you submit
• Managing quote and invoice processes, preparing contracts
• Providing our services and managing customer relations
• Fulfilling legal obligations (tax, accounting, archiving)
• Ensuring site security, detecting attacks/abuse (rate limiting, IP blocking)
• Improving service quality via anonymous statistics

04 Data Transfer

Your personal data may only be shared in the following limited cases and in accordance with applicable law:

• Legal authorities: upon official request (court, prosecutor, law enforcement)
• Service providers: businesses providing hosting (server) and email delivery infrastructure — only as necessary for the service and under contractual guarantees
• Payment/banking infrastructure: when required for invoice collection (Wise, local banks)

Your data is never sold to third parties for marketing purposes.

05 Retention Period

• Contact form messages: up to 12 months
• Invoice and commercial records: 5 years under Turkish Tax Law Art. 253, 10 years under Turkish Commercial Code Art. 82
• Visitor logs: 90 days for security purposes
• Security/attack logs: 180 days
• Cookie preferences: 12 months (on localStorage, per browser)

At the end of the retention period, data is deleted, destroyed or anonymized.

06 Cookie Policy

Our site uses cookies to improve user experience and provide core functionality. These small data fragments, stored in your browser's local storage, offer you a personalized experience on subsequent visits.

6.1 Cookie Categories

6.2 Preference Management

You can choose your consent via the cookie banner shown on your first visit. You can update your preferences any time via the Cookie Settings link at the bottom of the page. You can also delete/block cookies from your browser settings.

Warning: Blocking required cookies may prevent core site functions (forms, session) from working correctly.

07 Your Rights

Under KVKK Art. 11 and GDPR Art. 15-22, as a data subject you have the following rights:

• Learn whether your personal data is being processed
• If processed, request information about it
• Learn the processing purpose and whether it is used for that purpose
• Know third parties to whom data is transferred domestically or abroad
• Request correction of incomplete/incorrect processing
• Request deletion or destruction within KVKK/GDPR conditions
• Request that correction/deletion/destruction be notified to third parties
• Object if automated processing results in an adverse outcome against you
• Request compensation if you suffer damages due to unlawful processing

08 Application Method

To exercise your rights under KVKK/GDPR, please submit your application in writing via the channels below. Your application will be responded to within 30 days.

Your application must clearly state your name, surname, contact info and the specific request. You may attach a document verifying your identity.