Panilux Privacy Policy and KVKK Notice
Panilux processes your personal data in compliance with Turkish Law No. 6698 (KVKK) and applicable data protection regulations. This document fulfills our disclosure obligations as the data controller.
Data Controller
The data controller under KVKK is Panilux ("Panilux"). Contact: [email protected].
Categories of Personal Data Processed
- Identity: name, surname, title
- Contact: email, phone, address
- Customer transaction: orders, licenses, invoicing
- Finance: payments, refunds, collections
- Security: IP, logs, sessions, device info
- Marketing: consent, campaign interactions
Purposes of Data Processing
- Contracting/fulfilment, license management
- Customer support and notifications
- Billing, collection, accounting
- Security, fraud detection and logging
- Product development, measurement and quality
- With consent, marketing/communications
Legal Bases
- KVKK Art. 5/2(c) contract performance
- KVKK Art. 5/2(ç) legal obligation
- KVKK Art. 5/2(f) legitimate interests
- KVKK Art. 5/1 consent (for optional processing)
Transfers and Recipients
We may share data with service providers, payment institutions, hosting/infrastructure, legal and financial advisors, and competent authorities. International transfers are made with appropriate safeguards and as permitted under KVKK Art. 9 or with explicit consent.
Method of Collection
Via web panel, mobile app, API, support channels and integrations by automated or semi-automated means; and via contractual/offer processes in physical/electronic form.
Cookies
We use session and preference cookies. See the
Cookie Policy for details.
Data Retention and Erasure
Data is kept for statutory and contractual periods, then erased or anonymized after minimum retention periods expire.
Periods vary by applicable law and processing purpose.
| Category |
Typical Period |
| Billing/Accounting |
10 years (per commercial/tax laws) |
| Support & Communications |
3 years |
| Access/Transaction Logs |
2 years (subject to law) |
| Backups |
90 days |
| Marketing Records |
Until consent is withdrawn |
| Contracts/Account Records |
Term of contract + limitation period |
See the full policy:
Data Retention Policy
Data Subject Rights
Under KVKK Art. 11, you may exercise the following rights:
- Learn whether your personal data is processed
- Request information if processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred domestically or abroad
- Request rectification if data is incomplete or inaccurate
- Request erasure or destruction
- Request notification of rectification, erasure or destruction to third parties
- Object to a result against you arising from analysis exclusively by automated systems
- Claim compensation for damages arising from unlawful processing
To exercise your rights: [email protected]
Updates
We may update this notice; the current version is published on panilux.com.