Data Protection Notice (KVKK)

Your personal data is processed by Bu Gider, registered in the United Kingdom, acting as data controller, in compliance with KVKK and related legislation.

Within the scope of our Services we process the following categories of personal data:

• Identity data: first name, last name.
• Contact data: email address.
• Customer transaction data: subscription, billing and payment records.
• Transaction security data: IP address, session and login logs, password (encrypted).
• Marketplace integration data: API and order/product data for the stores you connect.
• Marketing data: preferences and engagement data subject to your explicit consent.

Your personal data is processed for the following purposes:

• Carrying out membership and account operations.
• Providing the Services and fulfilling contractual obligations.
• Managing billing, payment and subscription processes.
• Customer support and request management.
• Conducting information security processes and preventing abuse.
• Carrying out marketing and promotional activities where you have given explicit consent.
• Fulfilling our legal obligations.

Your personal data is processed on the basis of the following legal grounds set out in Article 5 of KVKK:

• Necessity for the conclusion or performance of a contract.
• Fulfilment of the data controller's legal obligation.
• Legitimate interests of the data controller, provided your fundamental rights and freedoms are not harmed.
• Existence of explicit consent (for marketing and optional cookies).

Your personal data is collected through our website, web app, Chrome extension, mobile app, cookies and electronic communication channels, by automated or partly automated means.

Your personal data may be transferred to the following parties, limited to the processing purposes and in line with Articles 8 and 9 of KVKK:

• Our suppliers providing cloud hosting, payment, email and analytics services (acting as data processors).
• Only the APIs of the marketplace stores you have connected.
• Authorized public institutions where required by legal obligation.

Your personal data is retained for as long as necessary for the purpose of processing and for the statutory retention periods set out in the relevant legislation. Once these periods expire, your data is deleted, destroyed or anonymized.

Under Article 11 of KVKK, you have the following rights as a data subject:

• Learn whether your personal data is being processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties to whom it is transferred, domestically or abroad.
• Request correction if it is incomplete or inaccurate.
• Request its deletion or destruction under the conditions of Article 7 of KVKK.
• Request that corrections, deletions and destructions be notified to third parties to whom the data was transferred.
• Object to a result against you arising from analysis solely by automated systems.
• Claim compensation if you suffer damage due to unlawful processing.

You may submit requests regarding the rights above to info@bugider.com. Depending on their nature, requests are concluded free of charge within 30 days at the latest; where the process incurs an additional cost, a fee under the Authority's tariff may apply.