Ekipta Personal Data Protection Notice

1. Data controller

For the Ekipta website, company account administration, membership, sales, support, security and direct communications, the data controller is MARVİA BİLİŞİM TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ (“Marvia”, “Ekipta” or the “Company”).

• Address: Merkez Mah. Hasat Sk. Kamara No: 52 İç Kapı No: 1 Şişli / İstanbul
• MERSIS: 0612182229800001
• Trade Registry No: 1105596
• Registered e-mail (KEP): marvia.bilisim@hs03.kep.tr
• Privacy e-mail: kvkk@ekipta.com

2. Scope and roles

This notice covers website visitors, company representatives, account users, people submitting demo/contact requests and people contacting Ekipta directly. For operational data uploaded by a customer company about its own staff, locations, customers or field workflows, the customer company generally determines the purposes and means of processing and Marvia provides Ekipta as a data processor within the agreed scope.

3. Categories of data

• Identity and contact information such as name, e-mail, phone, company and position;
• Account and security information such as user ID, role, session, IP, device/browser and login records;
• Customer transaction records such as membership, policy acceptance, beta/subscription and support requests;
• Communication data such as demo, feedback, complaint and live support messages;
• Technical usage data, including analytics only where the user has enabled the relevant preference;
• Operational data entered by customer companies, such as tasks, visits, location verification, photos, files, forms, signatures, orders, service and complaint records.

Ekipta does not require health, biometric, political opinion, religion, trade-union or similar special-category data for ordinary use. Users should not upload such data unless the necessary legal and technical conditions are satisfied.

4. Purposes

Data may be processed to create and operate accounts, provide the SaaS service and Public Beta, run product features, authenticate users, prevent abuse, provide support, resolve requests and complaints, meet legal obligations, protect legal rights and improve product performance.

5. Collection and legal basis

Data is collected electronically through web and panel forms, e-mail, KEP, JivoChat, security logs, cookie preferences and entries made by customer company administrators and users. Processing relies on the applicable legal grounds under Turkish data-protection law, including contract performance, legal obligation, establishment or protection of a right, legitimate interests that do not override fundamental rights and, where specifically required, explicit consent.

Acknowledging that a notice has been presented is not explicit consent. Marketing communications and non-essential cookies are managed separately and voluntarily.

6. Transfers

Data may be shared, only as necessary for the relevant purpose, with authorized personnel, hosting/infrastructure providers, configured e-mail providers, professional advisers and legally authorized public authorities. Ekipta’s core hosting, database and file infrastructure is provided in Türkiye by Güzel Hosting (GNET İnternet Telekomünikasyon A.Ş.).

JivoChat is activated only according to the user’s functional-cookie preference or explicit action and may involve international data transfers depending on the provider’s infrastructure. Where an international transfer is required, an appropriate mechanism under Turkish law must be used.

7. Retention

Data is retained only for the period necessary for the purpose and applicable legal obligations. More detail is provided in the Retention and Disposal Policy. Data is then deleted, destroyed or anonymized as appropriate, while backup copies are removed through the backup cycle.

8. Your rights

Data subjects may exercise the rights granted under Article 11 of Law No. 6698, including learning whether personal data is processed, requesting information, requesting correction or deletion where conditions are met, objecting to certain automated outcomes and requesting compensation for unlawful processing where applicable.

9. How to apply

Requests can be submitted with sufficient identity-verification information to Merkez Mah. Hasat Sk. Kamara No: 52 İç Kapı No: 1 Şişli / İstanbul, through marvia.bilisim@hs03.kep.tr or through an appropriate request to kvkk@ekipta.com. You may also use the Data Subject Request Form.