KVKK Privacy Notice

This privacy notice has been prepared under Law No. 6698 on the Protection of Personal Data (the Turkish Personal Data Protection Law, "KVKK") by Eva Soft Bilişim A.Ş. (Work10 İş Hanı, Hacı İlbey Mah. Ali Hikmet Paşa Cad. No:27/C, Balıkesir, Türkiye), in its capacity as data controller, to inform you about the personal data processed in connection with the zooasist.com website and the ZooAsist software (the "Service").

Two different roles

For the data that businesses subscribing to ZooAsist (vet clinics, pet shops, etc.) enter into the system about their own clients and animals, the business concerned is the data controller; for that data, ZooAsist acts as a data processor on behalf of the business and in line with its instructions. This notice describes the processing for which ZooAsist itself is the data controller, namely data relating to authorised representatives of subscribing businesses, users and website visitors.

Personal data processed

• Identity and contact: full name, email address, phone number.
• Business information: business name, type, address, tax details.
• Customer transactions: subscription, plan and payment records, and billing information.
• Transaction security: session information, login times, system activity logs.
• Usage and technical data: browser type, IP address, cookie data.

Purposes of processing

• Creating your account and providing the Service,
• Carrying out subscription, payment and billing processes,
• Ensuring information security and preventing misuse,
• Handling support requests and communicating with you,
• Improving the Service and measuring website usage,
• Fulfilling legal obligations.

Legal grounds

Your personal data is processed on the legal grounds set out in Article 5 of KVKK, namely that processing is necessary for the conclusion or performance of a contract, for the data controller to fulfil its legal obligations, for the establishment, exercise or protection of a right, and for the legitimate interests of the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject; and, where none of these grounds applies, on the basis of your explicit consent.

Transfers

Limited to the purposes above, your personal data may be transferred to hosting and infrastructure service providers, payment institutions (iyzico, Stripe), the messaging providers chosen by the business (e.g. Netgsm, Twilio, Meta), the notification infrastructure (Firebase Cloud Messaging), the website analytics provider (Google Analytics) and, upon request, to authorised public institutions and organisations. Some of these providers may have servers located abroad; transfers abroad are carried out in accordance with the conditions in Article 9 of KVKK.

Method of collection

Your personal data is collected electronically, by fully or partly automated means, through registration and contact forms, use of the Service, payment pages, email and telephone.

Your rights

Under Article 11 of KVKK, you have the right to: find out whether your personal data is being processed; request information if it has been processed; find out the purpose of processing and whether it is being used in line with that purpose; know the third parties in Türkiye or abroad to whom it has been transferred; request its correction if it is incomplete or inaccurate; request its deletion or destruction where the relevant conditions are met; request that third parties to whom it has been transferred be notified of these actions; object to any outcome against you resulting from analysis exclusively by automated systems; and claim compensation for any damage you suffer as a result of unlawful processing.

You can submit your requests by emailing [email protected] or by calling +90 850 308 23 82. Depending on their nature, requests are resolved within thirty days at the latest.