Gizlilik Politikasi

Privacy Policy

Effective Date: July 21, 2026
Last Updated: July 21, 2026

1. Purpose and Scope

This Privacy Policy explains how personal data may be processed when the Promotor mobile application is used. Promotor is an enterprise application that helps companies manage personnel, stores, work schedules, attendance, check-in and check-out records, location verification, leave, and operational processes. The application is intended solely for authorized company administrators and employees.

For personnel data processed through the application, the employer or corporate customer to which the user belongs may act as the data controller. Netbasit Internet ve Teknoloji, the provider of the Promotor service, may act as a data processor or, where applicable, as a data controller in connection with providing the service.

2. Data That May Be Processed

Depending on the features used and the user's permissions, the following categories of data may be processed:

• Account and contact information such as name, email address, phone number, company code, personnel number, role, and authorization details
• Location data used to verify whether an employee is at an authorized workplace or store during check-in or check-out
• Camera and image-related data when the user explicitly initiates a photo capture, document upload, or serial scanning process
• Application and device identifiers such as installation identifiers, PRM codes, and push notification tokens
• Personnel and operational records including attendance logs, shifts, leave records, store information, notes, and actions taken through the management panel
• Technical and diagnostic data such as application version, operating system information, IP address, crash logs, and support logs

3. Purposes of Data Use

Collected or processed data may be used for the following purposes:

• Creating and authenticating user accounts
• Providing authorization and role-based access
• Managing personnel, store, and company records
• Performing attendance, check-in, and check-out operations
• Verifying workplace or store location
• Attaching photos and documents to relevant records
• Managing shifts, leave, and operational workflows
• Sending mobile notifications
• Providing reporting and management functions
• Troubleshooting, maintaining security, and providing technical support
• Complying with legal obligations

4. Legal Basis for Processing

Personal data may be processed on the basis of performing a contract, complying with legal obligations, legitimate interests, establishing or exercising a legal right, and, where required, the user's explicit consent, in accordance with applicable law.

Device permissions such as location, camera, and photo access are requested through the operating system. Users may change these permissions in their device settings. Disabling a permission required for a particular feature may prevent that feature from functioning correctly.

5. Sharing of Data

Personal data may be shared only to the extent necessary to provide the service, including with authorized administrators of the company to which the user belongs, hosting and technical service providers, and public authorities where legally required.

Personal data is not sold and is not shared for third-party advertising. The application does not use personal data to track users across applications or websites owned by other companies.

6. Data Retention

Personal data is retained for as long as the user account or corporate service relationship remains active, for the period necessary to provide the application's functions, and for any additional period required by applicable law.

When the applicable retention period ends, personal data is securely deleted, destroyed, or anonymized. Retention periods for corporate personnel and attendance records may vary according to the employer's legal obligations and internal policies.

7. Data Security

Reasonable administrative and technical safeguards are used to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

Users are responsible for keeping their account information and passwords confidential. Suspected unauthorized access should be reported to the user's company administrator or through the contact details below.

8. User Rights

Depending on applicable law, users may have the right to:

• Learn whether their personal data is being processed
• Request information about the processing of their personal data
• Request correction of inaccurate or incomplete data
• Request deletion or destruction of data where legal conditions are met
• Request restriction of processing or object to certain processing activities
• Withdraw consent where processing is based on consent

Requests concerning corporate employee accounts may first be submitted to the administrator of the company to which the user belongs. Users may also submit requests through the contact details below.

9. Children's Privacy

Promotor is provided for enterprise operations and employee management and is not directed to children. The application does not intentionally seek to collect personal data from children.

10. Changes to This Privacy Policy

This Privacy Policy may be updated due to changes in application features, data processing activities, or applicable law. The current version becomes effective when it is published at the stated web address.

11. Contact

Data controller / service provider: Netbasit Internet ve Teknoloji Hizmetleri Ticaret A.S.
Contact email: enes.ozel@dorukiletisim.com.tr
Website: https://promotor.netbasit.com.tr
Postal address: Cumhuriyet, Gurpinar Yolu Caddesi No:5, 34500 Buyukcekmece / Istanbul

Questions and requests concerning personal data may be submitted through the contact channels listed above.