How Paymaster Technologies collects, uses, stores, shares and protects personal data in connection with this website.
Effective date: 16 September 2026
This Privacy and Personal Data Notice (the “Notice”) explains how PAYMASTER TECHNOLOGIES ELEKTRONIK PAZARLAMA DIS TICARET LIMITED SIRKETI (“Paymaster Technologies”, the “Company”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data in connection with the website https://paymastech.com/ (the “Website”).
The Company acts as the data controller for the processing described in this Notice.
This Notice is intended to fulfil the Company’s information obligations under Turkish Personal Data Protection Law No. 6698 (“KVKK”), including Article 10, and, where applicable, other data protection laws such as the EU General Data Protection Regulation (“GDPR”).
This Notice applies to personal data processed when you:
This Notice does not govern third-party websites, applications or services linked from the Website. Those third parties process personal data under their own privacy notices.
When you access the Website, our systems may automatically process limited technical data required to deliver and protect the Website, including:
We do not use this data to create advertising profiles or to track visitors across unrelated websites.
When you use the contact form or contact us directly, we process the information you choose to provide. Depending on the form fields and the content of your enquiry, this may include:
Please do not submit sensitive personal data or information that is not necessary for your enquiry.
We process personal data only where there is a lawful basis and only to the extent necessary for the relevant purpose.
| Processing purpose | Categories of data | Legal ground |
|---|---|---|
| Delivering the Website and maintaining its technical operation | Technical and usage data | Processing necessary for the legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed, under Article 5(2)(f) KVKK; legitimate interests under Article 6(1)(f) GDPR where applicable |
| Protecting the Website, networks and users; detecting errors, attacks, misuse and fraud | Technical, security and error data | Legitimate interests in information security and service integrity under Article 5(2)(f) KVKK and Article 6(1)(f) GDPR where applicable |
| Receiving, reviewing and responding to enquiries | Contact and enquiry data | Processing necessary for our legitimate interests in conducting business communications under Article 5(2)(f) KVKK; taking steps at the request of the data subject before entering into a contract where applicable under Article 5(2)(c) KVKK and Article 6(1)(b) GDPR |
| Preparing and discussing proposals, integrations and possible business relationships | Contact, professional and enquiry data | Contractual or pre-contractual necessity where applicable; otherwise legitimate interests in developing and managing business relationships |
| Complying with binding legal obligations and lawful requests from competent authorities | Data relevant to the legal obligation or request | Compliance with a legal obligation under Article 5(2)(ç) KVKK and Article 6(1)(c) GDPR where applicable |
| Establishing, exercising or defending legal claims | Relevant technical, contact, correspondence and transaction-related records | Establishment, exercise or protection of a right under Article 5(2)(e) KVKK; legitimate interests and Article 9(2)(f) GDPR where applicable |
Where processing is based on legitimate interests, we consider the necessity of the processing and balance our interests against the rights and reasonable expectations of the individual.
We do not rely on consent where another lawful ground properly applies. Where consent is legally required for a specific processing activity, it will be requested separately and may be withdrawn without affecting processing carried out before withdrawal.
We collect personal data:
The Website does not use advertising cookies, behavioural tracking or third-party analytics.
Website fonts are hosted locally. Loading a page therefore does not require the visitor’s browser to contact Google Fonts or another external font provider.
The Website may use strictly necessary technical storage or similar technologies only where required for security, operation of the contact form, language selection or other functionality expressly requested by the visitor. Such technologies are not used for advertising or cross-site tracking.
If we introduce analytics, advertising technologies or non-essential cookies in the future, we will update this Notice and, where legally required, request consent before placing or accessing them.
Personal data may be disclosed, only where necessary for the purposes described above, to:
Service providers may process personal data only for authorised purposes and under applicable contractual, confidentiality and security obligations.
We do not sell personal data.
Some infrastructure, hosting, communications or professional service providers may process personal data outside Türkiye or permit access from another country.
Where personal data is transferred outside Türkiye, we apply a lawful transfer mechanism and the safeguards required by Article 9 KVKK. Where the GDPR applies, we use an adequacy decision, approved contractual safeguards or another lawful transfer mechanism as required by Chapter V GDPR.
Information about the applicable transfer mechanism may be requested using the contact details in Section 1, subject to legal and confidentiality restrictions.
We retain personal data only for as long as necessary for the purpose for which it was collected and for any additional period required to comply with legal obligations or protect legal rights.
When retention is no longer necessary, personal data is deleted, destroyed or anonymised in accordance with applicable law and Company procedures.
We apply reasonable administrative, technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, misuse or destruction.
These measures may include access controls, secure transmission, system monitoring, logging, backups, supplier controls, confidentiality obligations and periodic review of security practices. No internet service can guarantee absolute security, but we review and improve safeguards in light of the nature of the data and relevant risks.
Under Article 11 KVKK, subject to the conditions and limitations provided by law, you may request information as to whether your personal data is processed and, if so:
Where the GDPR applies to the relevant processing, you may also have the right to:
Requests concerning personal data may be sent to:
Please state that the request concerns personal data and provide sufficient information for us to identify the relevant processing and verify that the request is made by the data subject or an authorised representative. We may request additional information only where reasonably necessary to verify identity, authority or the scope of the request.
Requests will be handled within the periods and according to the procedures required by applicable law. Applications under KVKK should comply with the applicable rules governing applications to a data controller.
The Website is intended for business and professional audiences and is not directed to children. We do not knowingly request personal data from children through the Website. If you believe that a child has submitted personal data, please contact us so that we can review and, where appropriate, delete it.
The Website contains links to products, websites and services that may be operated under separate terms and privacy notices. Following an external link may allow the relevant third party to process personal data. We are not responsible for the privacy practices of independent third parties and recommend reviewing their notices before providing personal data.
We may update this Notice where our Website, processing activities or legal obligations change. The current version will be published on this page with its effective date. Where a change materially affects individuals, we will provide an additional notice where required by law.
Questions about this Notice or the Company’s processing of personal data may be sent to:
