KVKK & GDPR Statement

1. Introduction & Statutory Framework

As SpineOS Group Kurumsal Bilişim & Operasyon Teknolojileri, acting in our capacity as Data Controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and international data protection standards (GDPR), we protect personal data belonging to our corporate clients, system users, and website visitors with the utmost rigor and diligence.

2. Purposes of Processing Personal Data

Your personal data is processed lawfully under statutory legal grounds strictly for:

• Execution and performance of B2B corporate software subscription contracts,
• Fulfillment of mandatory tax and e-invoicing regulatory reporting (GİB e-Invoice/e-Archive),
• System information security monitoring, vulnerability prevention, and anomaly auditing,
• Compliance with binding disclosures required by judicial authorities and government oversight bodies.

3. Transfer of Processed Data

Your personal data is never transferred to commercial third parties or external marketing agencies without your express consent, except to lawfully authorized public regulatory bodies and judicial authorities upon statutory request.

4. Your Rights Under Data Protection Laws

As a data subject, you hold the right to inquire whether your data is being processed, request details on processing purposes, request rectification of inaccurate records, or demand deletion.

You may submit your requests in writing via verified corporate email to contact@spineos.com. All formal inquiries will be processed free of charge within 30 calendar days.