This notice explains how PRESTATÜRK TEKNOLOJİ A.Ş. (“Company”) processes personal data under the Ara Sistem brand, in line with Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and related guidance. It covers visitors, account holders and users of tenant panels.
01
Controller, scope and roles
The controller is generally PRESTATÜRK TEKNOLOJİ A.Ş. Ara Sistem is the product brand. Registry and tax identifiers appear on invoices and pre-contract information.
The service is a SaaS operations panel, not domain or shared hosting sales. For store and marketplace data you import (end-customer orders, catalogue content), you are the controller; the Company acts as a processor to perform the subscription.
02
Categories of data
We may process identity, contact, billing, support, security logs, technical integration credentials and — only with consent — marketing preferences. Card data is normally handled by the payment institution. We do not request special-category data.
03
Purposes
Data is used to create accounts, bill and collect, provision the panel, enforce package limits, prevent abuse, handle support, meet legal retention duties and — with consent — send commercial messages.
04
Legal bases
Typical bases under KVKK art. 5: contract performance, legal obligation, legitimate interest (security), establishment of a right, and explicit consent where required. Consent is not a condition of the core service and may be withdrawn.
05
Your store and marketplace data
Catalogue, stock, price and order data remain your responsibility, including notices to your own customers. We do not sell this data. You must keep API keys secret and comply with marketplace terms and applicable law.
06
Recipients
Payment providers, hosting and email infrastructure, mandatory e-invoicing, competent authorities and professional advisers may receive data as needed to run the service or comply with law.
07
International transfers
If infrastructure or processors are outside Türkiye, KVKK transfer rules apply (adequacy, undertaking, consent or other lawful mechanism then in force).
08
Retention
We keep data only as long as the purpose and statutory periods require (for example tax records, typically 10 years). After that, data is deleted, destroyed or anonymised.
09
Your rights
You may request access, correction, deletion, information on recipients, objection to automated outcomes and compensation for unlawful processing, as set out in KVKK art. 11.
10
How to apply
Use the Contact page or a support ticket marked as a KVKK request. You may complain to the Personal Data Protection Authority if we do not answer in time or you dispute the answer.
11
Security
We apply administrative and technical measures (access control, HTTPS, logging, backups). No system is risk-free. Report suspected compromise immediately.
12
Children
The service is for business users. We do not knowingly open accounts for persons under 18.
13
Commercial messages
Promotional messages require prior opt-in under Law 6563. Transactional messages (orders, invoices, security) do not.
14
Changes
We may update this notice when the law or our processing changes. The date at the top is controlling. Continued use means you accept the current text.