Privacy Notice (KVKK)

Data Controller

LBSOFT BİLİŞİM VE YAZILIM TEKNOLOJİLERİ LTD. ŞTİ. (LBsoft), Üniversiteler Mah. 1597 Cad. No: 3/103 Bilkent, Çankaya / Ankara. Contact: info@lbsoftist.com, KEP: Ibsoft@hs01.kep.tr.

Personal Data We Process

• Identity: name, surname, Turkish ID number (for individual invoices), username, membership number.
• Contact: email, mobile and landline phone, fax, address.
• Customer transactions: orders, subscriptions, licenses and invoices; for corporate customers, company name, tax office and number.
• Security: IP address, session and sign-in logs, a one-way hash of your password.
• Finance: payment amount, result and the payment institution's transaction reference (we never process card numbers).
• Marketing: your communication preferences, only if you opt in.

Purposes and Legal Grounds

• Concluding and performing the membership and sales contracts, delivering licenses, providing support — KVKK Art. 5(2)(c).
• Issuing invoices, bookkeeping and reporting to authorities — Art. 5(2)(ç) (Tax Procedure Law, Commercial Code, Law No. 6563).
• Information, account and payment security; fraud prevention — Art. 5(2)(f) legitimate interest.
• Establishing, exercising or defending legal claims — Art. 5(2)(e).
• Sending campaigns and product news — your explicit consent and commercial electronic message approval under Law No. 6563.

How We Collect Data

Electronically and automatically, through the registration, order, contact and demo request forms and your use of your account.

Transfers

• Licensed payment institutions and banks for payments (e.g. PayTR, Türkiye İş Bankası, Yapı Kredi Bankası).
• Our accountant, e-invoice provider and competent public authorities for tax obligations.
• Email delivery and hosting suppliers.
• Authorised public bodies and courts, upon request.

Transfers Abroad

Our website and database are hosted on Google Cloud (Google Cloud Run / Cloud SQL, europe-west1). This transfer relies on appropriate safeguards such as standard contractual clauses under KVKK Art. 9, with the required notifications made to the Board.

Retention

Order and invoice records are kept for the legally required period (10 years for commercial books and documents); account data for the duration of membership and applicable limitation periods thereafter. Data is then deleted, destroyed or anonymised.

Your Rights (KVKK Art. 11)

• Learn whether your data is processed and request information about it,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Request correction of incomplete or inaccurate data, deletion or destruction where conditions are met, and notification of these to recipients,
• Object to outcomes against you arising solely from automated analysis,
• Claim compensation for damage caused by unlawful processing.

Applications

Send requests in writing to Üniversiteler Mah. 1597 Cad. No: 3/103 Bilkent, Çankaya / Ankara, via KEP to Ibsoft@hs01.kep.tr, or from your registered email address to info@lbsoftist.com. Requests are answered free of charge within 30 days.

Language

This English text is provided for information. In case of any discrepancy, the Turkish version prevails.