Skip to content
NarSoft

Privacy Policy

# PRIVACY POLICY AND PROTECTION OF PERSONAL DATA

Last Updated: 26.10.2026

1. Introduction and Purpose

At NNARSOFT, we attach great importance to the privacy of our users, customers, business partners, and visitors to our website, as well as to the security of their personal data.

This Privacy Policy (“Policy”) has been prepared to explain the principles regarding the processing, protection, storage, and transfer of personal data obtained within the scope of the services provided via the website www.nnarsoft.com.tr.

In our personal data processing activities, we adhere to the Personal Data Protection Law No. 6698 (“KVKK”), relevant secondary regulations, and other applicable legislation.

NNARSOFT is committed to implementing appropriate technical and administrative security measures to prevent the unlawful processing of personal data and unauthorized access to such data.

2. Data Controller

For the purposes of this Policy, the "data controller"—in relation to the operation of the NNARSOFT website and the personal data processing activities conducted by our company for its own purposes—is the natural or legal person to whom the NNARSOFT brand belongs. Brand: NNARSOFT
Website: www.nnarsoft.com.tr
Contact E-mail: [E-mail address for data protection/GDPR-related inquiries]
Trade Name: [Official company name]
Address: [Official company address]

Regarding personal data processed within the scope of the software and systems provided by NNARSOFT to its customers, the status of "data controller" or "data processor" is determined based on the nature of the specific service and the respective authority and responsibilities involved in the data processing activity.

3. Personal Data Processed

Depending on the nature of the services provided and the relationship the data subject has with our company, NNARSOFT may process the following categories of personal data:

  • Identity Information: Full name, job title, and details of authorized representatives.
  • Contact Information: Telephone number, e-mail address, business address, and communication requests.
  • Customer Transaction Information: Requests for quotations, orders, contracts, and records of services and support provided.
  • Transaction Security Information: IP address, access logs, session information, and system security records.
  • Technical Support Information: Service requests, fault/error reports, support-related correspondence, and technical activity history.
  • Financial Information: Data required for invoicing, payment, and accounting processes.
  • Marketing Information: Communication preferences, consents for commercial electronic messaging, and interactions with campaigns.
  • Requests and Complaints Information: Suggestions, requests, complaints, and feedback submitted by users. In systems provided by NNARSOFT—such as personnel attendance tracking, access control, and similar solutions—personal identification data, card or QR code identifiers, entry/exit timestamps, and authorization records may be processed, depending on the scope of the service.

In cases where the client organization acts as the "data controller," data processing activities within these systems are carried out in accordance with the client organization’s instructions and the terms of the applicable agreements.

4. Purposes for Processing Personal Data

Personal data may be processed for the following purposes, in compliance with relevant legislation:

  • Providing and developing NNARSOFT products and services.
  • Receiving, evaluating, and responding to customer requests.
  • Managing processes related to proposals, orders, contracts, and after-sales support.
  • Providing technical service, remote support, maintenance, and troubleshooting.
  • Managing software licensing, user authorization, and system security.
  • Enhancing service quality and improving operational processes.
  • Handling accounting, invoicing, and fulfilling financial obligations.
  • Managing information security processes and preventing unauthorized access.
  • Fulfilling legal obligations arising from applicable legislation.
  • Evaluating requests, suggestions, and complaints from data subjects.
  • Providing information regarding products, services, and promotional campaigns, provided that the necessary legal requirements are met.

Personal data are processed for specific, explicit, and legitimate purposes, and only to the extent that such processing is relevant, limited, and proportionate to the intended purpose. ## 5. Legal Grounds for the Processing of Personal Data

Personal data are processed based on the legal grounds set forth in Article 5 of the Personal Data Protection Law (KVKK), as applicable to the specific processing activity.

These legal grounds may include the following:

  • The data subject has given their explicit consent.
  • Processing is expressly provided for by law.
  • Processing is necessary for the conclusion or performance of a contract, provided that it is directly related to the parties to the contract.
  • Processing is necessary for the data controller to fulfill a legal obligation.
  • Processing is necessary for the establishment, exercise, or protection of a right.
  • Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

In cases where explicit consent is required, the data subjects must provide it of their own free will.

Last updated: 26.10.2026