Personal Data Protection Policy

This policy describes SOLONPORT’s general framework for protecting personal data across its corporate website, mobile applications, software products, support channels and business relationships. It applies to personal data processed by SOLONPORT BİLGİSAYAR YAZILIM HİZMETLERİ A.Ş. under the SOLONPORT name, except where a more specific notice is provided for a product, customer environment, employee, candidate or processing activity.

A mobile application or configured enterprise service may process only the data needed for the functions enabled by the relevant organisation. The organisation operating a customer environment may be the controller for operational user data, while SOLONPORT may act as a service provider or processor under the applicable agreement.

Personal data is handled lawfully, fairly and transparently; collected for specified and legitimate purposes; limited to what is relevant; kept accurate where necessary; retained no longer than required; and protected through proportionate technical and organisational measures.

Access is limited according to role and business need. Personal data must not be reused for an unrelated purpose without an appropriate legal basis and required notice.

Depending on the service and the features used, relevant categories may include:

• identity and business contact information;
• organisation, role, account and authentication information;
• support requests, communications and service records;
• device, application version, IP address, diagnostic, security and audit information;
• preferences and usage events needed to provide or improve an enabled function; and
• operational information entered into an enterprise product by an authorised customer organisation.

Specific applications should not request sensitive or special-category data unless the function, applicable agreement and law expressly support that processing.

Data may be processed to provide and secure requested applications or services; authenticate authorised users; maintain account and application continuity; deliver support; diagnose faults; protect against misuse; manage business relationships; meet contractual commitments; establish, exercise or defend legal rights; and comply with legal obligations.

The applicable legal ground depends on the relationship and jurisdiction. It may include contract necessity, steps requested before a contract, legal obligations, legitimate interests that do not override individual rights, or consent where consent is specifically required. Marketing consent, where relevant, is handled separately from access to a requested service.

SOLONPORT is the controller for its own corporate administration, direct enquiries, product communication and independently determined processing. For a mobile application or enterprise product operated for a port, terminal, customer or partner, that organisation may determine the purposes and means of user or operational-data processing. In that situation SOLONPORT processes data only within the applicable service role, agreement and authorised instructions.

Access may be provided to authorised personnel and to hosting, infrastructure, communications, security, support and professional service providers only where needed for the relevant purpose. Information may also be disclosed to competent authorities where legally required.

International processing may occur when services, authorised teams or customer environments operate in different countries. Required contractual, statutory or other transfer safeguards are applied according to the role, jurisdiction and transfer concerned.

Retention is determined by the enabled service, customer agreement, processing purpose, security need and applicable legal or limitation period. Data is deleted, destroyed, returned or anonymised when the purpose and applicable retention requirement end.

SOLONPORT uses proportionate access controls, environment separation, secret management, logging, backup, vulnerability management and operational procedures according to the system and risk involved. No internet or software service can guarantee absolute security, so security controls and incident procedures are reviewed as systems evolve.

Depending on applicable law, individuals may request information about processing, access, correction, deletion, restriction, objection, portability or review of relevant automated decisions, and may withdraw consent where processing relies on consent. A complaint may also be made to the competent authority.

For customer-operated applications, the request should normally be sent first to the organisation that provided the account or determines the processing. Requests concerning SOLONPORT’s own processing may be sent to solonport@solonport.com. Identity and authority may need to be verified without collecting unnecessary documents.

This policy is the stable public policy URL for SOLONPORT services and mobile-application store records. More specific in-app, customer or feature notices take precedence for the processing activity they describe and should link back to this framework where appropriate.

Website visitors should also read the Website Privacy Notice, KVKK Aydınlatma Metni and Cookie Policy.

This policy is reviewed when products, mobile applications, processing roles, providers, legal requirements or security practices materially change. The public URL remains stable and the latest update date is shown on this page.