Privacy Policy

As our company named Montarist Bilişim Yazılım Proje Danışmanlık İhracat İthalat ve Ticaret Limited Şirketi or Vignetim, we present our Privacy Policy to inform our users, fulfill our obligation to provide notice, and ensure seamless communication when necessary.

This Privacy Policy explains how Vignetim and its affiliates ("Vignetim") collect, use, share, and protect user information through the Vignetim website (https://www.vignetim.com), mobile applications, and other related services provided by Vignetim. The terms "we," "our," and "us" refer to Vignetim and its affiliates.

When certain personal information is collected from users, we ensure it is acquired either because it is legally required or for specific purposes. Optional information is collected and processed based on your explicit consent. Declining to provide optional information is entirely up to the user. However, please note that refusing to provide such consent may result in limited access to some of our services or features.

By using this website, related Application Programming Interfaces (APIs), or mobile applications, you agree to the terms and practices outlined in our Privacy Policy. Therefore, please read the Privacy Policy carefully. Please note that our services, website, and applications are not intended for individuals under the age of 18, and we do not knowingly collect any data related to minors.

This Privacy Policy outlines:

• What data we collect,
• How we use and store this data,
• How we share this data.

If you do not want your Personal Data (as defined below) to be processed in the manner described in this Privacy Policy, you may not use the website or any of the services, software, APIs, technologies, products, and/or features ("Services") provided through the website.

In this context, the following details regarding the processing and transfer of your personal data, which is generated or shared with us during your use of our website, mobile application, or any products, services, or applications we provide, are presented in accordance with the Personal Data Protection Law No. 6698 (KVKK) and EU General Data Protection Regulation (GDPR).

Vignetim's services are not designed for or directed towards individuals under the age of 18. We do not knowingly collect personal data from minors. If it comes to our attention that we have inadvertently collected such data, we will take immediate steps to delete it. Parents or guardians can contact us to request the deletion of any data collected from their children.

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, you may contact us through the following channels:

• Email: contact@vignetim.com
• Address: Yeni Baglica Mah 1023 Sk No 12 B 12 Etimesgut Ankara, Türkiye 06790
• Phone: +90 553 250 49 72

Personal Data

Personal data is any information relating to an identified or identifiable natural person. Sensitive personal data includes personal details that individuals may not wish to share, such as information about their race, ethnic origin, political or philosophical beliefs, religion, sect, or other beliefs, appearance, clothing, membership in associations, foundations, or unions, health status, sexual life, criminal convictions, security measures, as well as biometric and genetic data.

Data Subject

A data subject is an individual who can be identified directly or indirectly through personal data. This identification is generally based on unique identifiers such as a person's name, identification number, location data, or online identifiers, or one or more factors related to their physical, physiological, genetic, mental, economic, cultural, or social identity. When various collected data points are combined, they may allow the identification of a specific individual, thereby forming personal data.

Profiling

Profiling refers to any type of automated processing of personal data aimed at assessing specific characteristics of an individual. This process often involves analyzing or forecasting aspects such as a person's job performance, financial status, health, preferences, interests, dependability, behavior, location, or movements.

Vignetim collects, processes, and stores Personal Data during your use of Vignetim or when you provide your consent. This Personal Data may include your contact details, information provided by you, information obtained from publicly accessible databases, identification numbers issued by public authorities, and information related to your device or internet service (e.g., an IP address and a MAC number). All the personal data we collect is detailed below.

Vignetim operates globally in certain regulated jurisdictions and complies with the various regulations applicable to the collection, storage, and processing of personal data. Our company aims to meet the highest standards for data privacy compliance and sustainability. As these practices and legal obligations evolve, necessary updates will be implemented to ensure full compliance.

Vignetim collects data automatically through electronic means. When you register as a user, your data begins to be uploaded into our system. Whether your registration process is completed, interrupted, or completely abandoned, it is possible that personal data has already been entered into our system for use. Additionally, we collect personal data when you contact us through customer support, subscribe to marketing messages, or communicate with us via phone, email, or other communication channels.

When you start using our services, during your service requests and usage, while creating an account, when giving consent for promotional marketing, or participating in competitions, surveys, or research activities conducted via social media and other platforms, your personal data is collected.

Personal data may also be collected during customer conversations conducted by phone, mobile, or internet, as well as during written and digital applications made to our company.

When you access our website and applications electronically, information about the devices used, browser data, and similar technical details are collected.

Other data collection methods include information provided by third parties, publicly available data, or data published by you. For security reasons, third-party information may also be obtained to prevent crimes. Additionally, during "refer-a-friend" campaigns, personal data may be acquired by individuals participating in these campaigns.

We collect, use, store, and transfer your Personal Data, which may include:

For Individual Customers:

• Email address, mobile phone number, and other contact details.
• Full name (consistent with official ID).
• Nationality information.
• Passport number or other valid identification numbers.
• Date and place of birth.
• Identification documents (e.g., passport, driver's license, or national ID).
• Residential address and location information.
• Travel details, such as arrival date, port of arrival, reason for travel, vehicle registration license plate and country, VIN number
• Professional details, such as occupation and employer name.
• Additional personal data or documents requested by the compliance team (e.g., social security number, etc.).
• IP address, device ID, log records, and other technical details.
• Financial information (e.g., bank account details, payment card information, invoices, IBANs, payment-related information).
• Legal information (e.g., correspondence with judicial authorities and case/enforcement file information).
• Marketing and related information (e.g., professional details, educational background, permission and preferences for marketing communications, and responses to surveys and questionnaires).

Alternatively, you can log in using your Facebook, Google, or Apple account. In this case, we will receive the following personal data from Facebook, Google, or Apple to create a user account for you.

For Corporate Customers:

• Corporate name (including trade names or brands).
• Registration or establishment information.
• Full names and titles of all owners, managers, and legal representatives.
• Address information (primary workplace or other physical locations).
• Activity details and supporting evidence.
• Shareholding percentages of individual or corporate stakeholders.
• Contact details of authorized representatives and shareholders.
• Identity information for individuals acting on behalf of corporate customers (consistent with individual customer data).
• Individual personal data of corporate customer representatives (refer to the Individual Customers section).

For Website Visitors:

Log records, website traffic data, and IP address information are collected from visitors accessing our website.

Since our customers are located in different jurisdictions, many of which require explicit consent for the transfer of Personal Data outside of your jurisdiction, your explicit consent is required for the use and/or continued use of our services. Such consent is obtained during the registration process.

If you do not provide consent for such transfers, you may not be able to use the Vignetim platform and/or our services. All functions may be disabled.

We process your Personal Data only to the extent permitted by applicable legal regulations. In other words, we must have a lawful basis for processing your Personal Data. Your Personal Data is processed primarily based on the following legal grounds:

• Explicit Legal Requirements: Personal data is processed to fulfil a legal obligation where legally mandated.
• Legitimate Interests: Where necessary to protect the legitimate interests of our company, provided that it does not harm your fundamental rights and freedoms.
• Exercise or Protection of Legal Rights: Personal data may be processed to establish, exercise, or protect a legal right, such as during alternative dispute resolution or court proceedings.
• Compliance with Legal Obligations: Data processing may be required to comply with secondary legislation, regulatory and supervisory activities, and requests from public authorities, or for alternative dispute resolution and legal proceedings.
• Contractual Necessity: Personal data may be processed when necessary for the execution of a contract between you and our company, or upon your request before entering into such a contract.
• Explicit Consent: Where required, your explicit consent is obtained. You provide your consent freely, without coercion, and in response to clear information or warnings provided by us.

Vignetim uses your Personal Data to communicate with you, manage, provide, improve, and personalize the services we offer. Vignetim may also aggregate any Personal Data we collect and use it for its own purposes. Additionally, this data may be used to communicate with you about other products or services offered by Vignetim and/or its partners.

The table below outlines how your personal data is used, along with the purposes and corresponding legal grounds:

With your explicit consent, your data is processed using Performance, Targeting, and Functional Cookies to enhance your experience, provide personalized promotions and marketing offers, improve website or app content, identify preferences, and increase satisfaction.

As detailed below, your data may be transferred to parties for which we have obtained your explicit consent. The table below provides information regarding such data transfers:

Vignetim may occasionally share personal data with trusted third parties to enhance and optimize its service offerings. These third parties are bound by contractual obligations to safeguard and secure the shared data. Vignetim may engage with the third parties that assist Vignetim in delivering its professional services, such as telecommunication providers, technical support teams, cloud-based software service providers, and similar partners.

Vignetim use the services of third parties that collect, monitor and analyse personal data on our behalf. Such third parties are also used to personalize and distribute marketing materials, including advertisements for profiling. Third-party advertising technologies deliver relevant content and ads both on our platforms and across other websites and applications you use. These technologies, including cookies and other tracking mechanisms, may be placed on your device (e.g., computer or mobile phone) to collect information about your interactions with our services. The information collected is used for optimization and display of marketing content based on your previous visits to our website and other sites. And also used for reporting on content impressions, the use of marketing services, and interactions with marketing efforts related to visits to our website.

Vignetim use technical service providers for hosting purposes and certain services required for the website's functionality. Consequently, data is processed on the servers of these providers. These service providers process the data solely in accordance with our explicit instructions and are obligated to implement adequate technical and organizational measures to ensure data protection. As a result, our service providers act as data processors on our behalf.

If you wish to learn and how to manage cookie settings for profiling marketing examine our cookie policy.

We provide multiple payment options for our services and collaborate with a payment service provider. In this process, personal data is shared with the service provider.

We aim to protect users and Vignetim from unauthorized access, alteration, disclosure, or loss of the personal data we collect. We take various measures to ensure information security. Your data is securely stored in encrypted, secure storage areas in accordance with the highest application standards. To prevent the loss, misuse, or alteration of user data, we implement multiple security measures, including but not limited to the following:

Electronic Measures

Computer data containing personal information will be stored on computer systems and storage media subject to strict access restrictions.

Administrative Measures

Access to your personal data is restricted to authorized personnel who are required to comply with our internal confidentiality rules. Additionally, we enforce strict physical access controls for buildings and files. Furthermore, we regularly train our staff on relevant laws, regulations, and privacy/security guidelines to ensure their responsibilities, emergency strategies, and protocols are well understood.

Other Measures

Our web server is protected by various "firewalls."

Please note that no system can guarantee 100% security. Therefore, it is essential and your sole responsibility to take personal security measures to protect your personal data.

Recommended Security Steps:

• Use strong user identification, passwords, and PINs that are difficult to guess or deduce ("User Credentials"). Your User Credentials must meet the requirements specified at the time of creation. Keep your credentials safe and private and do not share them with anyone.
• Install antivirus, anti-spyware, and firewall software on your personal computers and mobile devices.
• Regularly update operating systems, antivirus software, and firewall products to the latest security patches or versions.
• Disable file and printer sharing on computers, especially when connected to the Internet.
• Regularly back up critical data.
• Consider using encryption technology to safeguard highly sensitive or confidential information.
• After using the platform, end each online session, log out completely, and clear your browser cache.
• Do not install software or run programs from unknown sources.
• Delete spam emails or chain letters.
• Do not open email attachments from unknown senders.
• Avoid providing personal, financial, or credit card information on little-known or suspicious websites.
• Do not use untrusted computers or equipment.
• Avoid accessing online services or performing financial transactions on public or shared computers.

If you suspect that your personal information, especially your account and/or password information, has been compromised, please immediately lock your account and contact our customer support team. Unless otherwise stated in the law or Terms of Use, we reserve the right to retain all collected personal data for up to 10 years during and after the account's or usage rights' validity period. You agree that we will not be held responsible for any information leaks or other losses caused without our intentional misconduct or gross negligence.

Upon your request, you can obtain a copy of your Personal Data and check whether the information held by us is accurate and up-to-date. If any of your Personal Data is incorrect, you may request an update. Additionally, you may request the deletion of your Personal Data; however, we may decline such requests in certain cases, such as for legal purposes or compliance with applicable laws.

To make a request for data access, correction, or deletion, please email contact@vignetim.com with the subject line "PERSONAL DATA." Complaints, objections, and suggestions related to your rights as outlined in Article 11 of the Personal Data Protection Law No. 6698 (KVKK) will be reviewed and responded to in accordance to legislation.

For all your rights requests made by residents of the European Economic Area or UK;

If data are processed based on Art. 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time, provided the objection is based on reasons arising from your specific situation. This right also applies to any profiling conducted under these provisions.

If you submit an objection, we will cease processing the affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is required for the establishment, exercise, or defense of legal claims (objection under Art. 21 GDPR).

Please note that we can only act on requests made by the data subject themselves or by someone authorized with valid proof of authority to act on their behalf. For this reason, before processing any request, we may take necessary steps at our sole discretion to verify the requester's identity (e.g., through a callback to the email address on file for the data subject, an email response, or other verification procedures we may deem appropriate).

Due to potential complexities and time zone differences between jurisdictions, it may not be possible to guarantee a specific timeline for fulfilling such requests. Vignetim assumes no responsibility for any loss or damage arising from delays in addressing data access, correction, or deletion requests. Additionally, for requests that are overly burdensome, repetitive, or require significant resources to comply, we reserve the right to charge a reasonable fee.

In accordance with Personal Data Protection Law No. 6698, we will communicate with you for marketing purposes only if you provide explicit consent during registration or while using our services.

In accordance with the General Data Protection Regulation (GDPR), Vignetim requires your explicit consent to send you marketing emails, except under specific conditions. For existing customers, the GDPR permits marketing communications without explicit consent if the following criteria are met:

• Existing Customer Relationship: The recipient have previously purchased goods or services from Vignetim or been involved in purchase negotiations.
• Similar Products or Services: The marketing communications relate to products or services similar to those the recipient has previously purchased or shown interest in.
• Right to Object: The recipient have been given a clear and accessible opportunity to opt-out of receiving marketing communications at the time their data was collected and in every subsequent marketing email.

During registration or using our services, you consent to receive marketing communications, unless you choose to opt-out. You can opt-out at any time by:

• Clicking the 'unsubscribe' link in any marketing email.
• Updating your preferences in your account settings.
• Contacting us at contact@vignetim.com.

Vignetim remains committed to GDPR compliance, ensuring transparency and respecting your rights regarding personal data processing for marketing purposes.

When accessing Vignetim, we may use industry-standard practices of placing small amounts of data on your browser (cookies). This information may be stored on the computer or other devices you use to visit Vignetim. Such information helps us identify you as a customer and collect data about your use of Vignetim, which allows us to customize our services and improve your experience.

Most browsers are set to automatically accept cookies. Some cookies expire at the end of your session, while others remain on your computer or devices until they are deleted or expire. You have the option to decline the use of our cookies, but this may affect the functionality of Vignetim services or your user experience.

For detailed information about our cookie usage, please review our Cookie Policy.

If you have any questions about this Privacy Policy or the use of your Personal Data, please contact us via email at contact@vignetim.com.

For users within the European Economic Area, you have the right to escalate unresolved issues regarding the collection, use, or disclosure of your personal data to the relevant regulatory authority in your jurisdiction.

Any future changes to our Privacy Policy will be published on this page and, where appropriate, notified to you through our official website or other communication channels. Please revisit this Privacy Policy regularly for updates and changes.

As stated earlier, your use or continued use of our Services constitutes your implied consent to the terms outlined herein, including any modifications or updates made to this Privacy Policy. Monitoring changes to this Privacy Policy is your responsibility, and Vignetim is not legally or financially responsible for any consequences arising from a failure to do so.