Privacy & Data Security

1. Identity of the Data Controller

This Privacy Policy governs the principles regarding the data collected, processed, and protected by SpineOS Group Kurumsal Bilişim & Operasyon Teknolojileri (“SpineOS Group”, “Company”, “We”) through the spineos.com website, Kobidash, PriceTrack, Kampanya, Seolares, and affiliated enterprise software suites.

2. Collected Data and Processing Methods

SpineOS Group processes minimum necessary data solely to deliver enterprise B2B software services, maintain platform integrity, and fulfill regulatory compliance:

• Contact & Company Information: Full name, corporate email address, phone number, company legal title, and request scope.
• System & Access Logs: IP address, browser user-agent, HTTP headers, timestamps, and session security tokens.
• Enterprise Software Data: Commercial and accounting data stored by the client are kept in strictly isolated tenant databases encrypted with AES-256 and are never viewed by company personnel or shared with third parties.

3. Data Security and Infrastructure Isolation

Our company implements multi-layered enterprise defense mechanisms to safeguard client data:

• Tenant-Level Isolation: Database schemas and file stores belonging to different organizations are logically and physically separated.
• End-to-End Encryption: All network communication is encrypted using TLS 1.3 and HTTP/3 QUIC; sensitive data at rest is protected with AES-256 encryption.
• Strict Access Controls: Production infrastructure access is restricted to authorized senior system engineers authenticated via Multi-Factor Authentication (MFA).

4. Third-Party Sharing and Prohibition of Data Sale

SpineOS Group strictly prohibits selling, renting, or trading customer data to third parties, advertisers, or external organizations. Data may only be disclosed under binding judicial court orders or mandatory statutory tax regulations (such as official GİB e-Invoicing protocols).

5. Data Subject Rights & Contact

Under applicable privacy laws (KVKK / GDPR), you retain the right to query whether your personal data is processed, request corrections, or demand deletion. For inquiries, you may reach out to our legal department directly at contact@spineos.com.