Privacy Policy
This is an English translation provided for convenience. In case of any discrepancy, the Turkish text prevails.
İmacyu Teknoloji San. ve Tic. Ltd. Şti.
Last updated: 14 October 2026
1. Purpose and Scope
İmacyu Teknoloji San. ve Tic. Ltd. Şti. (“İmacyu”) attaches importance to the confidentiality and protection of the information of its customers, users, business partners and website visitors.
This Privacy Policy sets out the general privacy principles applied in connection with the website www.imacyu.com and with the enterprise software, information technology, ERP, CRM, workflow management, cloud software, e-transformation (e-documents), integration, consultancy, maintenance and technical support services provided by İmacyu.
Detailed information on the processing of personal data is provided separately in the published Personal Data Protection Notice (KVKK) and in the protection notices specific to the relevant services.
2. Our Privacy Principles
İmacyu makes it a principle to protect the confidentiality of the commercial, financial, operational, technical and personal information it obtains in the course of its service relationships.
In this context, customer information, trade secrets, financial records, production data, employee information, customer and supplier records, technical documents, business processes and system information are regarded as information that must be protected against unauthorised disclosure and use.
The use of customer data for independent commercial purposes, other than for the provision of the relevant service and within valid contractual authorisations, is incompatible with İmacyu's privacy principles.
3. Categories of Information Processed
Depending on the nature of the relevant activity, İmacyu may process the following information:
- First name, surname and corporate contact details.
- Company, position, department and authorised person details.
- Quotation, order, contract and licence records.
- Technical support requests and service correspondence.
- User account and access authorisation details.
- IP address, session and transaction security records.
- Information relating to subscription and invoicing processes.
- System and error records that need to be accessed during technical support authorised by the customer.
Data recorded by the customer in ERP or CRM systems relates to the customer's commercial activities, and the legal roles of the parties in the processing of such data are assessed separately.
4. Purposes for Which Information Is Used
The information processed may be used for the purposes of:
- Fulfilling product and service requests,
- Conducting customer relations,
- Managing quotation and contract processes,
- Managing software licences and subscriptions,
- Providing technical support and maintenance services,
- Ensuring system security and service continuity,
- Carrying out integration activities,
- Fulfilling legal and contractual obligations
as set out above.
In the processing of personal data, the applicable legal grounds and the principle of data minimisation are observed.
5. Confidentiality of Customer Data
The software developed by İmacyu is used to enable customers to manage their own business processes and commercial activities.
The data that customers record in the systems does not become available for İmacyu's independent commercial use by reason of İmacyu being the software provider.
İmacyu makes it a principle that such information is accessed only to the extent necessary and authorised for the performance of the relevant service.
6. Cloud and On-Premises Installation Services
Depending on the service model, İmacyu software may run on the cloud infrastructure provided by İmacyu or on servers belonging to the customer.
The responsibilities for hosting, backup and system operation in cloud services are determined by the relevant service agreement.
In infrastructures belonging to the customer, the responsibilities for server, network, operating system, security and backup are assessed according to the services undertaken by the parties and their areas of control.
Where İmacyu has additionally undertaken a maintenance and infrastructure management service, its obligations arising from that service are reserved.
7. Technical Support and Remote Access
Authorised access to customer systems may be required in technical support, maintenance, troubleshooting, training and integration processes.
Such access is carried out within the framework of the requirements of the service and the contractual authorisations.
Commercial or personal information learned during technical support is not shared with unauthorised persons and is not used for purposes outside the service.
8. Sharing of Information with Third Parties
İmacyu does not disclose information to third parties in the absence of a legal basis or a valid contractual authorisation.
Where the service so requires, data may be lawfully shared with information technology infrastructure providers, authorised business partners, integration providers, parties to e-transformation (e-documents) services and competent public authorities.
Where personal data needs to be transferred abroad, the conditions prescribed by the relevant legislation are applied in addition.
9. Third-Party Internet Services
The Google Maps service is used on İmacyu's Contact page.
The map is loaded depending on the visitor's preference. When the map is loaded, a direct connection may be established with Google and certain technical information may be transmitted to Google.
Details of this processing are set out in the Cookie and Local Storage Policy.
10. Information Security
In protecting the information it processes, İmacyu is guided by the principles of confidentiality, integrity, availability and authorisation.
Information security measures are applied in line with the nature of the service provided, the technical infrastructure, the risks and the relevant contractual terms.
Taking into account that no information system offers a guarantee of absolute security, the aim is to reduce security risks.
11. Retention and Erasure of Information
Information is retained for the periods required by the purposes of processing and within the scope of statutory retention obligations.
The provisions of the relevant service agreement apply to the processes of delivery, export, retention and erasure of customer data at the end of the contract.
12. Changes to the Policy
İmacyu may update this policy depending on changes occurring in its services or in the legislation.
The current policy is published on the corporate website.
13. Contact
İmacyu Teknoloji San. ve Tic. Ltd. Şti.
Web: www.imacyu.com
E-mail: [email protected]
Address: Gürselpaşa Mahallesi, Seyhan / Adana, Türkiye