Privacy and KVKK Notice

This notice informs users, customer representatives, visitors and related persons about the personal data processed while using TiosCRM services.

TiosCRM is a cloud software service for customer management, sales tracking, task management, quote tracking, reporting and similar business processes.

It covers personal data processed through the TiosCRM website, application panel, support channels, sales processes, subscription operations and billing.

Your personal data is processed by the following company as data controller:

• Company: Zenmira
• Address: Pamukkale Teknokent, Denizli
• Email: [email protected]

In this text, "TiosCRM" refers to the data controller identified above.

The following personal data may be processed:

• Identity: name, surname, title, company name, tax and invoice details.
• Contact: email address, phone number, address.
• Account: username, hashed password, user role, permission level, account status.
• Transaction: subscription plan, payment status, invoice history, support requests, activity history.
• Technical: IP address, browser and device info, session and log records, security records.
• Financial: payment amount, payment date, invoice details, payment-provider transaction references.
• Marketing and communication: communication preferences, campaign permissions, form responses, demo requests.
• Usage: panel usage actions, feature usage, error and performance records.

TiosCRM users may enter data belonging to their own customers, prospects, employees or third parties.

This may include customer name, phone number, email, meeting notes, quote information, task records, sales-process information and similar commercial records.

For such data, lawful collection, informing the relevant persons and providing the required legal basis are the User's responsibility.

TiosCRM processes this data on the User's instructions, to provide the service.

Personal data may be processed for the following purposes:

• Creating and managing the TiosCRM account.
• Running subscription, payment, billing and accounting processes.
• Providing users secure access to the service.
• Running technical support, customer service and request management.
• Improving service quality, security and performance.
• Detecting and fixing system errors.
• Preventing unauthorized access, misuse, fraud and security risks.
• Meeting legal obligations and running contract processes.
• Improving the user experience.
• Sending campaigns, announcements and marketing communications where the user consents.

Your personal data may be processed based on the following legal grounds set out in law:

• Processing being necessary for the conclusion or performance of a contract.
• The data controller meeting a legal obligation.
• Processing being mandatory for the establishment, exercise or protection of a right.
• The legitimate interest of the controller, provided it does not harm the fundamental rights of the data subject.
• Being expressly provided for by law.
• The explicit consent of the data subject where required.

Your personal data may be shared, limited to the processing purposes, with:

• Authorized public institutions.
• Courts, enforcement offices and official authorities.
• Financial advisor, accounting, legal and audit providers.
• Cloud infrastructure, hosting, backup and security providers.
• Email, SMS, notification, payment and billing providers.
• Technical support, maintenance, software development and system management providers.
• Business partners and integration providers.

Personal data is transferred only to the extent necessary and in line with applicable law.

TiosCRM may use service providers located abroad for cloud infrastructure, email, analytics, error tracking, payment or support.

Where transfer abroad is required, legal mechanisms compliant with applicable law are applied.

For data the User transfers to TiosCRM, if integrations or services requiring transfer abroad are used, the User may need to provide the required disclosure, permission and legal conditions.

Personal data is kept for as long as the processing purpose requires.

Subscription and account data may be kept while the customer relationship continues and, after it ends, for the period required by legal obligations.

Invoice and accounting records are kept for the periods set out in law.

Log and security records may be kept for reasonable periods for system security and legal obligations.

Personal data whose retention period has ended is deleted, destroyed or anonymized.

TiosCRM takes reasonable technical and administrative measures to secure personal data.

These may include access authorization, password security, logging, backup, firewall, encryption, access control, permission limits and regular system checks.

However, no service over the internet can be guaranteed entirely risk-free. Users are responsible for their own account security, strong passwords and preventing unauthorized access.

Individuals whose personal data is processed have the following rights under applicable law:

• To learn whether their personal data is processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether it is used accordingly.
• To know the third parties, at home or abroad, to whom data is transferred.
• To request correction of incomplete or incorrect data.
• To request deletion or destruction of data under the conditions set out in law.
• To request that correction, deletion or destruction be notified to third parties to whom data was transferred.
• To object to a result against them arising solely from automated analysis.
• To claim compensation for damage arising from unlawful processing.

Data subjects may submit requests about their personal data via:

• Email: [email protected]
• Address: Pamukkale Teknokent, Denizli
• Subject: KVKK Data Subject Request

Requests should include name, surname, contact details, the subject of the request and information to verify identity.

TiosCRM evaluates and concludes requests within the periods set out in law.

Campaigns, announcements, product updates or marketing content are sent to users only in line with applicable law.

The User may change their commercial electronic message preferences or stop receiving communications at any time.

System, security, invoice and subscription notices necessary for using the service are not deemed marketing.

TiosCRM may update this Privacy and KVKK Notice from time to time.

The current version is published on the TiosCRM website or application panel.

For significant changes, users may be informed by appropriate means.

This notice takes effect on the date it is published.