Privatlivspolitik

This Privacy Policy applies to the baer-soft.com website and all services operated by BAERSOFT ("Company", "we", "us"), including Bookinly.

Data controller: BAERSOFT — Istanbul, Turkey. For any request regarding your personal data, please use the form on our Contact page.

Contact form: When you submit the form, we collect your name, email address, and the content of your message.

Technical data: To prevent abuse, we temporarily process your IP address on form submissions (to enforce a rate limit). This data is not stored permanently.

Analytics: Only if a Google Analytics Measurement ID is configured on the site do we collect anonymized/aggregated usage statistics such as page views. This feature is disabled by default, and no analytics data is collected unless it is enabled.

We never collect, process, or store any payment or card information on this site.

We process your contact-form data solely to respond to your inquiry and to potentially establish a service relationship. Where the EU General Data Protection Regulation ("GDPR") applies, our legal basis is your consent (Art. 6(1)(a) — given by submitting the form) and/or our legitimate interest in responding to inquiries (Art. 6(1)(f)).

For users in Turkey, processing is based on Article 5/2(c) of Law No. 6698 on the Protection of Personal Data ("KVKK") — processing directly related to the establishment or performance of a contract — together with your explicit consent.

Contact-form records are kept for as long as necessary to resolve your inquiry, plus a reasonable period afterward to meet potential legal obligations, after which they are deleted or anonymized.

Upon your deletion request, your data is removed promptly unless we have a legal obligation to retain it (see Section 6).

Your data is stored with cloud infrastructure providers using industry-standard encryption in transit (TLS/HTTPS): database hosting (Neon), file storage (Vercel Blob), and application hosting (Vercel).

The contact form is protected against automated/malicious submissions via rate limiting and a hidden honeypot field.

No method of internet transmission or electronic storage is 100% secure; while we take reasonable technical and organizational measures, we cannot guarantee absolute security.

If GDPR applies to you, you have the right to access (Art. 15), rectify (Art. 16), erase / "be forgotten" (Art. 17), restrict processing (Art. 18), receive a copy of your data in a portable format (Art. 20), and object to processing (Art. 21). You also have the right to lodge a complaint with your local data protection authority.

If KVKK applies to you (users in Turkey), Article 11 grants you the right to learn whether your data is processed, request information about it, learn its purpose and whether it is used accordingly, know the third parties to whom it is transferred, request correction of inaccurate data, request deletion/destruction once the reason for processing no longer applies, request that such corrections/deletions be notified to third parties the data was shared with, object to a result produced solely by automated analysis of your data, and claim compensation for damages arising from unlawful processing.

To exercise any of these rights, contact us via our Contact page; we will respond within 30 days.

We never sell or share your data with third parties for marketing purposes.

To operate the Service, we rely on a limited number of subprocessors: Vercel Inc. (application hosting and file storage), Neon Inc. (database hosting), Resend (only if configured, for contact-form notification emails), and Google LLC (only if configured, for anonymized usage analytics via Google Analytics). These providers process data solely on our behalf and under our instructions.

Our services are directed at businesses, and we do not knowingly collect data from individuals under the age of 18.

We may update this policy from time to time. The "last updated" date on this page reflects the most recent revision. We encourage you to review it periodically.