Privacy Policy

ARTICLE 1 – PARTIES

DATA CONTROLLER
Legal Entity: YELMER LTD (Unit 2C, Little Britain House, Alma Road, Chesham, HP53HB, United Kingdom)
Email: [email protected]

DATA SUBJECT
Individuals or legal entities who use the digital products and services provided by YELMER LTD. (MySYS Web and mobile applications etc.).

ARTICLE 2 – METHODS AND SCOPE OF DATA COLLECTION

Personal data may be collected via website forms, software products, mobile applications, support requests, cookies, integrations with third-party services, and user interactions.

Collection Methods: Forms, APIs, session logs, activity records, support requests, and feedback channels.
Service Dependency: In some cases, collecting personal data is technically required for service delivery. If the user refuses to share such data, access to the service may be restricted or denied.

ARTICLE 3 – TYPES OF DATA COLLECTED

Identity Information: Name, surname, username.
Contact Information: Email address, phone number.
User Activity Data: Login/logout times, preferences, interaction history.
Technical Data: IP address, browser details, device type, location information.
Content Data: Messages, uploaded documents, support-related content shared by the user.

ARTICLE 4 – PURPOSES OF DATA PROCESSING

To provide services and manage user accounts.
To communicate with users and provide support and notifications.
To enhance service quality and optimize systems.
To comply with legal obligations.
To use anonymized data for product development, reporting, and marketing strategies.
To conduct analysis for security, fraud prevention, and abuse detection purposes.

ARTICLE 5 – DATA SHARING AND TRANSFER

YELMER LTD does not sell, rent, or disclose personal data to third parties without user consent. However, exceptions are as follows:

Data may be securely and minimally shared with infrastructure providers necessary for service delivery (e.g., hosting, email, analytics services).
Data may be shared with public authorities if legally required.
All transfers are made using encrypted communication channels (e.g., HTTPS) and limited to the required purpose.
Some services may be hosted abroad, in which case personal data may be transferred internationally in accordance with applicable data protection laws (e.g., GDPR, KVKK).

ARTICLE 6 – DATA RETENTION PERIOD

User account information is stored during the active use period and for legally mandated retention durations.
Contact and activity history is retained for a maximum of 2 years unless required longer by law.
Cookies are stored until session ends or up to 12 months depending on their purpose.
Anonymized data may be retained and processed indefinitely for analytical purposes.

ARTICLE 7 – USER RIGHTS

In accordance with the GDPR, KVKK, and other applicable laws, data subjects have the following rights:

To access their personal data and obtain information about the purposes of processing.
To request correction, deletion, or anonymization of their data.
To request transfer (portability) of their data to third parties.
To object to the processing of their personal data and withdraw consent.
However, requests that are malicious, repetitive, or impose a disproportionate technical burden may be lawfully rejected with justification.

To exercise these rights, users can contact us via email at [email protected]. Requests will be evaluated and responded to within 30 days at the latest.

ARTICLE 8 – ENFORCEMENT AND MODIFICATION

This policy enters into force on 01/01/2025. YELMER LTD reserves the right to amend this policy at any time. Updates are published on the company’s website and become effective immediately upon publication.