top of page

​

Privacy Policy

​

1. Purpose and Scope

This Privacy Policy explains how IDY Teknoloji Bilişim Limited Şirketi (“Company” or “IDYCARD”) collects, processes, stores, shares, and protects personal data in connection with its website at www.idycard.com, web platform, iOS and Android mobile applications, digital business cards, and corporate management services (collectively, the “Platform”).

IDYCARD processes personal data in accordance with applicable data protection legislation, including Turkish Personal Data Protection Law No. 6698 (“KVKK”).

This Privacy Policy provides information about the processing of personal data. Where explicit consent is legally required, it will be obtained separately.

 

2. Personal Data We Process

Depending on the services used, IDYCARD may process the following categories of personal data:

  • Identity and contact information: Name, surname, telephone number, email address, job title, company name, and other contact details provided by users.

  • Digital profile information: Profile photos, social media links, websites, addresses, locations, files, documents, and other user-provided content.

  • Account information: Account details, membership status, access permissions, account preferences, and login records.

  • Device and technical information: Device type, operating system, IP address, application version, connection information, and error logs.

  • Usage and analytics information: Digital profile views, profile access through QR codes or NFC, visit counts, and service usage statistics.

  • Subscription and transaction information: Premium membership status, subscription start and renewal details, transaction and order records, and payment verification information received from payment providers.

  • Notification information: Notification preferences, device push notification identifiers, and technical information necessary to deliver notifications.

Not all categories of data are collected from every user. The data processed depends on the services used and the user's preferences.

 

3. Purposes of Processing Personal Data

IDYCARD may process personal data for the following purposes, based on applicable legal grounds:

  • Creating and managing user accounts.

  • Creating, displaying, and sharing digital business card profiles.

  • Enabling profile access through NFC and QR code technologies.

  • Operating corporate accounts and management dashboards.

  • Activating, verifying, and managing Premium subscriptions.

  • Providing profile view and usage statistics.

  • Delivering system, security, and service notifications.

  • Improving user experience and resolving technical issues.

  • Preventing unauthorized access and protecting Platform security.

  • Complying with legal obligations.

  • Sending product announcements, promotional messages, and marketing communications where the necessary permissions have been obtained.

Personal data is processed based on the legal grounds established under Article 5 of the KVKK. Where special categories of personal data are processed, Article 6 and other applicable legal requirements apply.

 

4. Digital Business Cards and Profile Sharing

IDYCARD enables users to create digital business card profiles and share their contact information through NFC, QR codes, or personal profile links.

Information published by users on their digital profiles may be viewed by individuals who access the relevant profile links.

Users may update and manage their profile information through the available account management features.

Users are encouraged to consider the visibility and accessibility of the personal information they choose to publish.

 

5. Premium Subscriptions and Payments

IDYCARD may offer paid Premium subscription plans in addition to its standard services.

Premium subscriptions may be purchased through the Apple App Store, Google Play, or third-party payment services available through the IDYCARD website.

To manage subscriptions, IDYCARD may process subscription status, transaction identifiers, subscription periods, renewal information, and payment verification details.

Payment transactions may be processed by the payment service provider associated with the selected purchase channel. Such providers may apply their own privacy policies and terms of service.

IDYCARD may process information necessary to verify transactions and activate Premium services.

Subscription renewals, cancellations, and management are subject to the applicable terms of the channel through which the subscription was purchased.

 

6. Notifications and Corporate Announcements

IDYCARD may deliver notifications to users through its mobile applications and Platform.

The notification system operates according to the following principles:

Corporate notifications: Authorized corporate administrators may send notifications exclusively to users associated with their own organization and within the scope of their assigned management permissions.

IDYCARD notifications: IDYCARD may send service updates, system information, security announcements, and information about new features to Platform users. Promotional and marketing notifications are sent only where the necessary permissions have been obtained in accordance with applicable law.

Individual users: Individual users are not permitted to send direct notifications to unrelated users, unknown individuals, or other users outside the authorized corporate notification system.

Push notifications may require operating system permissions and the processing of technical device identifiers.

Users may manage application notification permissions through their device settings.

Personal data associated with notifications is processed only for the provision of the relevant services and other purposes permitted by applicable law.

 

7. Usage Statistics and Analytics

IDYCARD may generate statistics relating to the use of digital business card profiles.

These statistics may include profile view counts, access through QR codes or NFC, and technical information related to usage activity.

Such information may be used to provide profile performance insights, enable Premium analytics features, and improve Platform services.

Where analytics information constitutes personal data, it is processed in accordance with applicable data protection legislation.

 

8. Corporate Accounts and Authorization

Corporate customers may manage user accounts and digital business card profiles associated with their organizations through the corporate management dashboard.

Corporate administrators' access and management permissions are limited to the authorization scope assigned to their organization.

Where corporate customers provide employee data to IDYCARD, the respective roles of the parties as data controllers or data processors are determined based on the specific service relationship and applicable legislation.

 

9. Sharing and Transfer of Personal Data

Where necessary for providing services or fulfilling legal obligations, personal data may be shared with the following categories of recipients:

  • Hosting, infrastructure, and technical support providers.

  • Payment and subscription service providers.

  • Mobile application and notification infrastructure providers.

  • Authorized corporate administrators within their assigned permissions.

  • Legally authorized public authorities.

  • Other business partners and suppliers necessary for service delivery.

Where personal data is transferred internationally, IDYCARD applies the requirements of Article 9 of the KVKK and other applicable legislation.

 

10. Data Retention and Account Deletion

Personal data is retained for as long as necessary to fulfill the purposes for which it was processed and to comply with applicable legal retention requirements.

When the applicable retention period expires or the reasons for processing no longer exist, personal data is deleted, destroyed, or anonymized in accordance with applicable law.

Users may request account deletion through the account deletion feature available within the mobile application.

Certain records may be retained following account deletion where required by applicable law.

Deleting an IDYCARD account may not automatically cancel an active subscription purchased through the Apple App Store or Google Play. Users may need to manage their subscriptions separately through the relevant purchase channel.

 

11. Data Security

IDYCARD implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, unlawful processing, loss, or disclosure.

Security controls are applied to support the protection and continuity of Platform services.

 

12. Cookies and Similar Technologies

IDYCARD may use cookies and similar technologies on its website and web platform to enable essential functionality, manage user sessions, improve security, and enhance user experience.

Cookies may be categorized as essential, functional, analytical, or, where applicable, marketing cookies.

Where required by law, consent is obtained before non-essential cookies are used.

Users may manage their cookie preferences through browser settings and any available cookie preference tools.

 

13. Data Subject Rights

Under Article 11 of the KVKK, individuals have the right to:

  • Learn whether their personal data is being processed.

  • Request information about the processing of their personal data.

  • Learn the purposes of processing and whether their data is used accordingly.

  • Learn the third parties to whom their data has been transferred.

  • Request correction of incomplete or inaccurate personal data.

  • Request deletion or destruction of personal data under applicable legal conditions.

  • Request notification of correction, deletion, or destruction to relevant third parties.

  • Object to adverse outcomes resulting exclusively from automated processing.

  • Request compensation for damages arising from unlawful processing.

Requests may be submitted to the Company through the application methods provided on www.idycard.com.

Requests will be evaluated as soon as possible and within 30 days at the latest, in accordance with applicable legislation.

 

14. Third-Party Services and Links

The Platform may contain links to third-party websites, applications, or services.

Such third parties may have their own privacy policies and terms of service.

IDYCARD is not responsible for the independent data processing activities of third-party services, except to the extent that responsibility is imposed on IDYCARD under applicable law.

 

15. Changes to This Privacy Policy

IDYCARD may update this Privacy Policy to reflect changes in legislation, services, or operational requirements.

The updated Privacy Policy becomes effective on the date it is published on the Company's website.

Where applicable law requires additional notification or explicit consent, the relevant requirements will be fulfilled.

 

16. Contact Information

Data Controller: IDY Teknoloji Bilişim Limited Şirketi

Website: www.idycard.com

Requests concerning personal data protection may be submitted through the Company's official contact and application channels published on its website.

​

​​

bottom of page