Privacy Policy
Corporate website · Last updated: 7 August 2026
1. About this Policy
This Privacy Policy explains how ZP İnternet ve Yazılım Hizmetleri Limited Şirketi ("ZP SoftTech", "we", "us") handles personal data collected through our corporate website at zpsofttech.com (the "Website"). It is written to comply with both the Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the EU General Data Protection Regulation ("GDPR").
Scope. This Policy covers only the corporate Website. Our products are governed by their own, separate legal documents: AlpRoute (alproute.com) has its own Terms and Privacy Policy; Alcor and Swapeon will have their own when released. If you use a product, please read that product's documents.
A separate Turkish-language privacy notice (aydınlatma metni), prepared under KVKK Article 10, is also available. Where there is any inconsistency, the Turkish notice governs for KVKK purposes.
2. Data Controller
| Legal name | ZP İnternet ve Yazılım Hizmetleri Limited Şirketi |
|---|---|
| Registered address | Çiğdem Mah. Karagözsırtı Cad. No: 22, İç Kapı No: 2, Beykoz / İstanbul, Türkiye |
| General contact | info@zpsofttech.com |
| Data protection (international) | privacy@zpsofttech.com (gdpr@zpsofttech.com also reaches us) |
| Data protection (KVKK / Türkiye) | kvkk@zpsofttech.com |
3. What we collect, and why
The Website is a static presentation site. It sets no cookies, uses no analytics, advertising or tracking, and has no user accounts. The only personal data we actively process is the information you choose to send us when you contact us by email.
| Data | Purpose | Legal basis (GDPR) | Legal basis (KVKK) |
|---|---|---|---|
| Your name, email address and message content | Receiving and replying to your enquiry | Art. 6(1)(f) legitimate interest; or Art. 6(1)(b) pre-contractual steps | Art. 5(2)(f) legitimate interest; or Art. 5(2)(c) contract |
| Technical connection data (e.g. IP address) in our hosting provider's server logs | Security and reliable delivery of the Website | Art. 6(1)(f) legitimate interest | Art. 5(2)(f) legitimate interest |
We do not process special categories of data through the Website — please do not send us such data by email. We do not use automated decision-making or profiling.
4. Fonts and third-party resources
The Website's fonts are self-hosted on our own infrastructure. We do not load fonts, scripts or styles from third-party servers, so your IP address is not transmitted to any third party (such as Google) in order to display this Website.
5. Sharing and international transfers
We do not sell, rent or trade your personal data. We share it only with our hosting and email service providers acting as our processors, strictly to operate the Website and our mailbox, and with authorities or advisers where legally required.
International transfer note. ZP SoftTech is established in Türkiye, a country outside the EU/EEA for which the European Commission has not issued an adequacy decision. If you contact us from within the EU/EEA, your message reaches us in Türkiye. Where such a transfer requires safeguards, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) or an applicable derogation under Art. 49 GDPR (for example, your explicit request or contractual necessity). Under KVKK, cross-border transfers are handled in line with KVKK Article 9.
6. Retention
We keep enquiry emails only as long as needed to deal with your request and for a reasonable follow-up period, unless a longer period is required by law (e.g. tax, commercial or limitation rules).
7. Your rights
If GDPR applies to you (you are in the EU/EEA), you have the rights in Articles 15–22: access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest, and rights relating to automated decision-making (which we do not carry out). You may also lodge a complaint with your local supervisory authority.
Under KVKK Article 11, you have the right to: learn whether your data is processed; request information; learn the purpose and whether data is used accordingly; know the third parties to whom data has been transferred at home or abroad; request rectification, erasure or destruction and notification of these to third parties; object to results arising from exclusively automated analysis; and claim compensation for damage caused by unlawful processing.
How to exercise your rights. Email privacy@zpsofttech.com (international) or kvkk@zpsofttech.com (Türkiye), or write to our registered address. We may need to verify your identity. We respond within 30 days, as required by KVKK, free of charge unless the request requires additional cost per the fee schedule of the Turkish DPA. If you are unsatisfied, you may complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) or, in the EU/EEA, your local authority.
8. Changes
We may update this Policy from time to time; the date above shows the current version.