Privacy policy and data protection notice

1. Data controller

This notice has been prepared by TEK10 Teknoloji Danışmanlık Anonim Şirketi ("TEK10"), acting as data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") in connection with the vitscreen digital signage service (the "Service"), in order to fulfil its duty to inform. Contact: info@tek10.com.tr · Address: Yamanevler Mahallesi, 34768 İstanbul.

2. Data we process

• Identity and contact: full name, email, phone, company name and job title.
• Account: password (irreversibly hashed), two-step verification secret, role and permission information.
• Transaction security: sign-in records, IP address, browser information, activity log of actions taken in the panel.
• Device: online status of screens, version and technical telemetry.
• Customer content: the images, videos, text and price data you upload — this data remains under the control of the respective customer.
• Enquiry form: the name, company, email, phone and message you share in the quote and contact forms.

3. Purposes of processing

• Creating your account and providing, maintaining and improving the Service
• Responding to your quote and support requests
• Keeping accounts secure and preventing abuse
• Meeting legal obligations and providing information to competent authorities

Marketing messages are sent only with your explicit consent.

4. Legal grounds

Your personal data is processed under Article 5/2 of the KVKK on the grounds that (a) it is expressly provided for by law, (c) it is necessary for the conclusion or performance of a contract, (ç) it is required to fulfil a legal obligation and (f) it is necessary for our legitimate interests; where none of these grounds applies, it is processed on the basis of your explicit consent.

5. Isolation of customer data

vitscreen is a multi-tenant platform: each customer's data is logically isolated to its own account; under no circumstances can one customer access another customer's data. Customer content is processed solely to provide the Service and is not used for marketing purposes.

6. Security

Data is encrypted in transit with TLS; access is restricted through role-based authorization and mandatory two-step verification; systems are backed up and monitored regularly. Every change made in the panel is written to the activity log with who/what/when information.

7. Transfers

Data is kept on our managed cloud infrastructure. Contracted infrastructure providers are used for hosting and email delivery; these providers process data only on our instructions and under confidentiality obligations. Beyond this, data may be transferred only to competent public authorities within the scope of legal obligations, subject to the conditions in Articles 8 and 9 of the KVKK.

8. Retention period

Account data is kept for as long as your account is open; after closure it is retained for the periods required by applicable legislation (e.g. 10 years for commercial books and invoice records, 2 years for access logs) and is then deleted or anonymized. Trial accounts that are not activated within 90 days of the trial ending are deleted together with their content.

9. Cookies

This marketing site does not use analytics, advertising or third-party tracking cookies; for this reason no cookie banner is shown. The management panel uses browser storage to keep your session and remember your theme/language preferences; these are strictly necessary for the Service to work.

10. Your rights under Article 11 of the KVKK

• To learn whether your personal data is being processed and, if so, to request information about it
• To learn the purpose of processing and whether the data is used in line with that purpose
• To know the third parties to whom the data is transferred, in Turkey or abroad
• To request correction of incomplete or inaccurate data, and its deletion or destruction under Article 7 of the KVKK
• To request that corrections and deletions be notified to the third parties to whom the data was transferred
• To object to an outcome against you that results from analysis by exclusively automated systems
• To claim compensation if you suffer damage due to unlawful processing

11. How to submit a request

You can send your requests by email to info@tek10.com.tr or in writing to our company address. Requests are concluded free of charge within 30 days at the latest. You can also request deletion of your account and content by writing to the same address; the action is carried out with the account owner's approval and cannot be undone.