Personal Data Protection Authority
T-POINT PERSONAL DATA PROTECTION NOTICE
Data Controller
This Personal Data Protection Notice has been prepared by Codevisor Bilişim Çözümleri Ltd. Şti. (“Codevisor”), acting in its capacity as the data controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”).
- Company Name: Codevisor Bilişim Çözümleri Ltd. Şti.
- Address: Yenişehir Mah. Ankara Cad. 360 Office No:405, İç Kapı No:16 Pendik / İstanbul
- E-mail: info@tpoint.app
Purposes of Processing Personal Data
Your personal data obtained through the T-Point mobile application, website and support channels are processed for the following purposes:
- Execution of Tax Free (VAT refund) processes
- Creation and management of user accounts
- Conducting identity verification and security checks
- Managing support and communication processes
- Fulfillment of legal obligations towards authorized public institutions and authorities
- Improvement and development of the application and services
- Sending notifications, announcements and promotional communications, subject to explicit consent
Your phone number is used solely for support purposes and for contacting you when necessary.
Categories of Personal Data Processed
Personal data processed are limited to the following categories depending on the nature of the service provided:
- Identity information: Name, surname, date of birth, passport number
- Contact information: E-mail address, phone number
- User account information: Account registration and verification data
- Transaction data: Technical and transactional records related to Tax Free processes
- Payment information: Limited card information required to complete payment transactions
- Identity verification data: Passport image collected in exceptional cases
- Technical data: System and log records related to application usage
- Device and hardware access data: Within the scope of transactions carried out through the application, access to the device camera may be requested for identity verification purposes. Such access is carried out only within the permissions granted by the User, and the data obtained via the camera are processed solely for the relevant transaction.
Information on Card and Payment Data
Within the scope of payment transactions, only limited payment data necessary for the completion of the transaction are processed.
Such data are transmitted to the infrastructures of licensed payment service providers at the time of the transaction and are not stored permanently within Codevisor systems.
Security, storage and processing of payment transactions are carried out in accordance with the applicable legislation, compliance requirements and security standards of the relevant payment service providers.
Passport Image and Identity Verification
Passport images and similar identity verification data are processed solely for the purposes of compliance with applicable legislation and payment service provider requirements, and to complete the relevant transaction.
Upon completion of the relevant transaction or in cases where the transaction does not occur, such data are automatically deleted from the systems, limited to the mandatory retention period.
Transfer of Personal Data
Your personal data may be transferred, in accordance with KVKK and applicable legislation, to:
- Authorized public institutions and authorities
- Intermediary institutions involved in Tax Free processes
- Payment service providers
- Third parties providing technical infrastructure, hosting and security services
only to the extent required for the provision of the service.
Personal data may also be transferred abroad, where necessary, in compliance with applicable legislation, due to transactions carried out with users located abroad or processes of an international nature within the scope of service provision. In this context, necessary technical and administrative measures are implemented.
Methods of Collection and Legal Grounds
Your personal data are collected through the mobile application, website and support channels by automated or partially automated means.
Data processing activities are based on the following legal grounds:
- Performance or establishment of a contract
- Fulfillment of legal obligations
- Legitimate interests
- Explicit consent
Data Retention and Deletion
Personal data are retained for the period stipulated in the applicable legislation and limited to the purpose of processing.
Upon request for deletion of the user account, personal data related to accounts with no transactions are deleted. Transaction records required to be retained by law are preserved for the relevant legal retention periods.
Your Rights as a Data Subject
Pursuant to Article 11 of KVKK, as a data subject, you have the right to:
- Learn whether your personal data are processed
- Request information if your personal data have been processed
- Learn whether your personal data are used in accordance with their purpose
- Request correction of incomplete or inaccurate data
- Request deletion or destruction of your personal data
- Request compensation in case of damage
You may submit your requests within this scope via info@tpoint.app Your applications will be concluded within the timeframes stipulated by the applicable legislation.
About Us
Useful Link
Information
