Legal
Privacy Policy
Permbot - operated by NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ
Last updated: 28 May 2026
This Privacy Policy explains how NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ ("we", "us", "Permbot") collects, uses, stores, and shares personal data when you visit our website, register for an account, use our consent management platform (CMP), or interact with us as an agency, client, or site visitor.
We process personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Turkish Personal Data Protection Law (KVKK) where relevant.
NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ H. Rıfat Paşa, Yüzer Havuz Sk. Perpa Ticaret Merkezi B Blok Kat: 13 No: 2361, 34860 Şişli/İstanbul Tax office: ŞİŞLİ V.D Tax ID: 6321434155 MERSİS: 1234567890 Phone: +90 212 333 33 33 Email: info@permbot.net Web: https://permbot.net
1. Data controller
For personal data relating to account holders, billing contacts, and visitors of permbot.net, NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ acts as the data controller.
When you deploy the Permbot widget on your website, you are the data controller for your end-users' consent choices; we act as a data processor for those consent logs. See our Data Processing Addendum (DPA) for processor terms.
2. Personal data we collect
- Account & identity: name, email address, company or brand name, account type (agency/client), password (stored hashed), and profile preferences.
- Billing & commercial: billing address, tax identifiers, invoice details, and payment metadata when you subscribe to paid plans (processed by our payment provider; we do not store full card numbers).
- Technical & usage: IP address, browser type, device identifiers, session logs, API request metadata, and dashboard activity necessary for security and service delivery.
- Consent records (processor role): on behalf of our customers, we store consent decisions, timestamps, policy versions, anonymized or pseudonymous visitor identifiers, and the data residency region selected for each site.
- Support & communications: messages you send to support, feedback, and marketing preferences where permitted.
3. Purposes and legal bases
- Providing the service (contract): account creation, site configuration, widget delivery, consent logging, analytics in your dashboard, and customer support.
- Security & fraud prevention (legitimate interests / legal obligation): authentication, abuse detection, audit logs, and infrastructure monitoring.
- Billing & compliance (contract / legal obligation): invoicing, tax reporting, and responding to lawful requests.
- Product improvement (legitimate interests): aggregated, non-identifying usage statistics to improve reliability and features.
- Marketing (consent or legitimate interests where allowed): information about Permbot features, with opt-out available.
4. Regional data residency
Permbot is built on a regional data sovereignty architecture. When you configure a site or client, you select a consent data location (for example Türkiye or the European Union).
End-user consent logs for that site are stored in isolated infrastructure in the region you choose - for example dedicated TR or EU database clusters - and are not commingled with consent records from other regions for operational purposes.
Account metadata, billing, and platform configuration may be stored in our primary operational environment; however, consent evidence records remain regionally isolated as configured.
6. Retention
We retain account data for the duration of your subscription and a reasonable period thereafter for legal, tax, and dispute resolution purposes.
Consent logs are retained according to your plan settings and applicable law; you may configure retention where the product allows. After deletion requests from the data controller, we delete or anonymize processor data within agreed timeframes.
7. Security
We implement technical and organizational measures including encryption in transit (TLS), access controls, logging, segmented databases per region, and regular backups. No method of transmission over the Internet is 100% secure; we continuously improve our controls.
8. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict, object, port data, and withdraw consent. Turkish residents may apply to NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ under KVKK; EU/UK residents under GDPR.
To exercise rights regarding your Permbot account, contact info@permbot.net. For consent records collected on your website, contact the site owner (data controller) first; we will assist controllers as required under our DPA.
9. International transfers
Where personal data is transferred outside your region, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, and regional storage choices you make in the product.
10. Children
Permbot is a B2B service not directed at children under 16. We do not knowingly collect children's data.
11. Changes
We may update this policy. Material changes will be notified via the website or email. The "Last updated" date at the top reflects the current version.
12. Contact
Questions about this Privacy Policy: info@permbot.net | +90 212 333 33 33
NOTTEC BİLİŞİM GÜVENLİK ELEKTRİK ELEKTRONİK İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ H. Rıfat Paşa, Yüzer Havuz Sk. Perpa Ticaret Merkezi B Blok Kat: 13 No: 2361, 34860 Şişli/İstanbul Tax office: ŞİŞLİ V.D Tax ID: 6321434155 MERSİS: 1234567890 Phone: +90 212 333 33 33 Email: info@permbot.net Web: https://permbot.net