Privacy Policy

Last updated: 31 March 2026 · Digi Card System

1. Introduction

This Privacy Policy explains the general principles governing the processing of personal data while you use the digital business card and related software services offered by Digi Card System (the “Service”, “we”). By using the Service you acknowledge that you have read this policy and accept its application.

Piküp Medya Danışmanlık, as the operator of the Service, undertakes to take the necessary technical and organisational measures in its data processing activities. Tenant (business) administrators remain responsible for the legal obligations arising from the card content they create for their own employees or third parties.

2. Data controller and contact

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller is:

  • Legal entity: Piküp Medya Danışmanlık
  • E-mail: info@digicardsystem.com (for KVKK applications and privacy requests)

3. Categories of data processed

By the nature of the Service, the following data may be processed, for example:

  • Identity and contact: first name, last name, e-mail, phone (for account creation and support).
  • Customer transactions: plan, invoice and payment records (tokenised/summary data via the payment provider wherever possible).
  • Transaction security: IP address, device and browser information, session and security logs, password hashes (irreversible).
  • Usage: digital card views, click/redirect statistics, panel activity.
  • Content: text, images, links and contact details that tenant users upload to cards.

4. Purposes of processing

Data may be processed for the conclusion and performance of the contract, legitimate interest (security and service improvement), explicit consent (marketing communication, where given), legal obligations, and the conduct of legal proceedings in the event of a dispute.

5. Legal grounds

Under KVKK Articles 5 and 6, the legal grounds include: processing being expressly provided for by law; being directly related to the conclusion or performance of a contract; being necessary for the data controller to fulfil a legal obligation; being necessary for the establishment or protection of a right; or being necessary for the legitimate interests of the data controller. Any processing of special categories of personal data is limited to the cases provided for by law and/or explicit consent.

6. Transfers

Data may be transferred to our service providers under contractual confidentiality obligations for purposes such as hosting, security, payment, e-mail delivery and similar. Where a transfer abroad is required, we act within the conditions set out in KVKK (and, where necessary, explicit consent or an adequacy decision / standard contract). Duly made requests of public authorities are reserved.

7. Retention periods

Data is retained for as long as required by the purpose of processing and by the limitation / statutory retention periods set out in the applicable legislation. At the end of the period the data is deleted, destroyed or anonymised; the same principles are applied to backups within a reasonable, technically feasible period.

8. Security

We strive to protect the confidentiality, integrity and availability of data through appropriate encryption, access controls, logging and processes. Absolute security cannot be guaranteed on the internet; users are expected to use strong passwords and not to share their account credentials.

9. Cookies and similar technologies

Cookies or similar technologies may be used for sessions, security and preferences. You can refuse cookies in your browser settings; in that case some features may be limited.

10. Your rights under KVKK

As a data subject, under KVKK Article 11 you have the right to: learn whether your data is processed; request information; learn the purpose of processing; know the third parties to whom data is transferred domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction; object to a result that is to your detriment produced by automated analysis (if any); and claim compensation for damages.

You may submit your requests via info@digicardsystem.com. Your right to lodge a complaint with the Turkish Personal Data Protection Board is reserved.

11. Protection of children

The Service is not designed to knowingly collect data from children. If you are a parent or guardian and believe that data relating to your child is being processed, please contact us.

12. Changes to this policy

This policy may be updated from time to time. In the event of significant changes we may notify you by e-mail or through a panel notification. The current text is always published at this address.