This privacy policy has been prepared by Ibility Teknoloji Anonim Şirketi, established at ibilityapp.com, as the data controller, in order to inform you about the collection methods, processing, use, transfer and destruction of your personal data within the framework of Article 10 titled Disclosure Obligation of the Data Controller and Article 11 titled Rights of the Data Subject regarding the processing of personal data of the Personal Data Protection Law No. 6698 (KVKK). This privacy policy applies to personal data processed within the scope of Ibility Teknoloji Anonim Şirketi's own website, membership processes, contractual relationships, sales, marketing, support activities and products and services offered directly as data controller.
With regard to personal data processed through content created and managed by companies acting as Customers through the application, the relevant Customer is the data controller and Ibility acts as the data processor.
We take customer privacy and personal data protection seriously and this policy explains how your personal information is collected, used, protected and shared.
Ibility;
The fulfillment of the disclosure obligation and provision of the necessary legal basis regarding data processing activities carried out by the Customer as data controller is the responsibility of the relevant Customer.
As Ibility, we process personal data of visitors and members in accordance with the Personal Data Protection Law No. 6698, legal legislation and decisions of the Personal Data Protection Authority. Personal data processed by Ibility as data controller is limited to identity, contact, user account, transaction security, billing and financial information. With regard to information that may constitute special categories of personal data (e.g., health data, gender, age, etc.) entered through surveys, evaluation forms, open-ended questions, feedback areas and similar content created by the Customer within the application, the relevant Customer is the data controller, and Ibility processes this data solely for the purpose of providing the technical infrastructure and in its capacity as data processor. In addition to identifying information about members, Ibility also collects aggregated statistics about visitors. For example; if the Ibility platform is visited, general information about the location of the users' computer, the website from which it was visited is automatically collected, and this information is not used to determine the identity of the users.
Apart from the automatically collected data, it is also necessary to collect identifying personal data. These data include identity, contact and occupational information, as well as data such as photographs and video recordings in the shared content. Apart from this, comments on the content and records of conversations with Ibility employees (messages, comments, opinions) are also among the data to be collected. If deemed necessary, it is also possible to collect personal data of special nature, provided that it is collected in accordance with the law and with your explicit consent.
According to the regulation titled "Conditions for Processing Special Categories of Personal Data" in Article 6 of the KVKK, race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data are special categories of personal data. It is prohibited to process these special categories of personal data without the explicit consent of the data subject. However, in cases stipulated by law, personal data other than health and sexual life may be processed without the explicit consent of the data subject.
Your collected personal data may be processed by Ibility within the personal data processing conditions specified in Articles 5 and 6 of the KVKK Law, limited to the service received for the fulfillment of obligations and proportionate to this purpose for the following purposes:
Personal data collected from data subjects through surveys, evaluation forms, open-ended questions, feedback areas and similar content created by the Customer, who is the data controller, within the application are processed for the purposes of training, development, measurement, analysis, reporting and improving the customer experience.
Personal data processed in this scope are processed in accordance with the general principles set forth in Article 4 of Law No. 6698, limited to the execution of the relevant work, and Ibility acts as data processor with regard to this data.
The provision of the legal basis for the processing of this data, the fulfillment of the disclosure obligation and the obtaining of explicit consent when necessary is the responsibility of the relevant Customer.
Data processing for the purpose of purchasing services through digital applications and benefiting from customer services and support is based on the legal reasons of being expressly provided for by law pursuant to subparagraph (a) of Article 5/2 of the KVKK, being directly related to the conclusion or performance of the contract pursuant to subparagraph (c), being mandatory for Ibility to fulfill its legal obligations as the data controller pursuant to subparagraph (ç), and being mandatory for Ibility to establish, protect and exercise a right pursuant to subparagraph (e). The processing of this data is not subject to your consent. In this respect, we state that you do not have the right to request the deletion or destruction of your personal data until the end of the service utilized and the retention periods required by law.
Our customers' personal information is not shared or sold to third parties without their consent. However, information may be shared with authorized business partners to fulfill legal requirements or to provide services. Data transfer within Turkey may be transferred without seeking explicit consent in accordance with subparagraph 8/2(a) of the KVKK, limited to the cases where it is required by law in accordance with 5/2 (a), (c) is mandatory for the establishment and/or performance of the contract, (ç) is mandatory for the fulfillment of a legal obligation and (e) is mandatory for the establishment, exercise or protection of a right.
The data controller for the personal data you transmit in communication with the service providers is the relevant service providers, and since the transactions you make through channels other than Ibility during the provision of the service (for example, payment transactions) and the records regarding the provision of the service are part of the legal relationship between the service provider and the service recipient, Ibility does not act as the data controller for the data processed and stored within this scope.
Ibility is obliged to take all kinds of physical, technical and administrative measures to ensure an adequate level of security in order to prevent unlawful processing of your personal data, unlawful access to your personal data and to ensure the protection of your personal data and takes these measures to the maximum extent. Ibility takes appropriate technical and organizational measures to ensure the security of customer information.
Unless otherwise stated in the Clarification Text [link], your personal data are stored until the end of the 10 (ten) year retention period from the date of termination of the service relationship. For detailed information, please review the Clarification Text.
Processing of your personal data for marketing purposes is limited to the service period. Ibility will not use your personal data to contact you for marketing purposes at the end of the service period.
At the end of these periods, your personal data will be deleted, destroyed or anonymized in the first destruction period.
Ibility has prepared separate special information texts ("Clarification Text") for users, employees, employee candidates, suppliers and managers. These clarification texts have been delivered to each relevant person group or access authorization has been given.
As a data subject, in accordance with the legislation in force, your Personal Data
Your aforementioned rights are restricted by law and can probably only be provided by us under certain conditions.
You may submit the above-mentioned requests to the e-mail address [email protected]. Ibility will finalize your request as soon as possible upon receipt of the relevant documents. Depending on the nature of your request, this period is at the latest thirty days.
If you have any questions or concerns regarding our privacy policy, please feel free to contact us. Please visit our website for our contact details.