Privacy Policy & Notice

<p><strong>Data Controller:</strong> Cengel ID ("Platform", "We")</p> <p><strong>Contact:</strong> [[email protected]]</p> <p>At Cengel ID, we respect your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you create a Cengel ID account and use our services.</p> <p>This policy has been prepared in compliance with the <strong>Law on the Protection of Personal Data No. 6698 (KVKK - Turkey)</strong> and the <strong>General Data Protection Regulation (GDPR - European Union)</strong> standards.</p> <h2>1. Data We Collect</h2> <p>We collect the following categories of data to provide our services:</p> <h3>A. Information You Provide to Us</h3> <ul> <li><strong>Account Information:</strong> Name, E-mail address, Username, and Password (stored in encrypted form) required for registration.</li> <li><strong>Profile Information (Optional):</strong> Date of birth, location information, biography (about text), website, social media links, language, and time zone preferences.</li> </ul> <h3>B. Information Collected Automatically</h3> <ul> <li><strong>Session and Device Data:</strong> For security purposes, we collect IP address, browser type, operating system, device information, and login/logout timestamps.</li> <li><strong>Cookies:</strong> Technical cookies required for the operation of our site and functional cookies that remember your preferences. (Please refer to our <em>Cookie Policy</em> for details).</li> </ul> <h2>2. Purposes of Processing and Legal Bases</h2> <p>We process your data for the purposes listed below, based on the specified legal grounds (KVKK Art. 5 and GDPR Art. 6):</p> <table> <thead> <tr> <th>Purpose</th> <th>Legal Basis</th> </tr> </thead> <tbody> <tr> <td><strong>Service Provision:</strong> Account creation, identity verification, centralized session management (SSO).</td> <td><strong>Performance of a Contract</strong> (Essential to provide the service to you).</td> </tr> <tr> <td><strong>Security:</strong> Detecting suspicious logins, session monitoring, preventing cyber attacks.</td> <td><strong>Legitimate Interest</strong> (To ensure the security of the Platform and your account).</td> </tr> <tr> <td><strong>Legal Compliance:</strong> Keeping traffic logs, crime prevention.</td> <td><strong>Legal Obligation</strong> (Compliance with relevant country laws).</td> </tr> <tr> <td><strong>Personalization:</strong> Birthday messages, language/region settings.</td> <td><strong>Explicit Consent</strong> (Managed via your profile settings).</td> </tr> </tbody> </table> <h2>3. Data Sharing and Transfer</h2> <p>Your personal data is <strong>not sold or shared with third parties for marketing purposes.</strong> Data sharing occurs only under the following circumstances:</p> <ul> <li><strong>Connected Applications (SSO):</strong> When you wish to log in to a 3rd party application using your Cengel ID account, the data you approve on the "Permission Screen" (e.g., Name and E-mail only) is transferred to that application.</li> <li><strong>Service Providers:</strong> Your data is stored on secure cloud infrastructure providers located in <strong>Frankfurt, Germany (Contabo)</strong>.</li> <li><strong>Legal Requests:</strong> Data may be shared with authorized authorities within the scope of court orders or valid legal processes.</li> </ul> <h2>4. Data Retention and Deletion</h2> <ul> <li><strong>Retention Period:</strong> We retain your data as long as your account is active.</li> <li><strong>Account Deletion:</strong> You can permanently delete your account from your user panel. When you delete your account, your data is immediately removed from live systems.</li> <li><strong>Backup Policy:</strong> To ensure data integrity and for disaster recovery scenarios, deleted data continues to be stored in our encrypted backups for <strong>30 days</strong>. At the end of the 30th day, it is automatically deleted from backups as well.</li> </ul> <h2>5. Your Global Rights (KVKK &amp; GDPR)</h2> <p>Regardless of where you live, Cengel ID grants the following rights to all its users:</p> <ol> <li><strong>Right of Access:</strong> Request a copy of your data.</li> <li><strong>Right to Rectification:</strong> Update incorrect or incomplete information.</li> <li><strong>Right to Erasure (Right to be Forgotten):</strong> Request deletion of your account and data.</li> <li><strong>Data Portability (Export):</strong> Download all account data in a machine-readable format (JSON, etc.).</li> <li><strong>Right to Object:</strong> Object to our data processing activities.</li> </ol> <p>To exercise these rights, you can contact us at <strong>[[email protected]]</strong>.</p> <h2>6. Children's Privacy</h2> <p>Our platform is not designed for children under the age of <strong>16</strong> (or the digital age of consent in your local jurisdiction). We do not knowingly collect data from children. If you are a parent and believe your child has provided us with data, please contact us.</p> <h2>7. Changes</h2> <p>We may update this policy from time to time. We will notify you via email or through the platform when significant changes occur.</p>