Privacy Policy

1. Introduction

At IVDR.net, operated by B10TECH Biyoteknoloji Sanayi ve Ticaret Limited Şirketi ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://ivdr.net) and purchase our digital compliance templates.

As we provide services to customers within the European Union, this Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

We may collect the following types of personal data:

• Identity and Contact Data: Name, email address, company name, and job title when you make a purchase, subscribe to our newsletter, or contact us.
• Financial and Transaction Data: Details about payments to and from you, and other details of products you have purchased from us. Note that payment processing is handled by third-party processors (iyzico), and we do not store your full credit card details.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you use our website, products, and services.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Contract Performance: To process and deliver your orders, including managing payments and providing access to digital downloads.
• Legitimate Interests: To improve our website, products, marketing, customer relationships, and experiences.
• Legal Obligation: To comply with a legal or regulatory obligation, such as accounting and tax requirements.
• Consent: To send you marketing communications and newsletters, if you have explicitly opted in. You can withdraw your consent at any time.

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data with trusted third parties for the following purposes:

• Service Providers: IT and system administration services, payment processors (iyzico), and email marketing platforms (e.g., Formspree).
• Professional Advisers: Lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
• Legal Requirements: Authorities and regulatory bodies if required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

5. International Data Transfers

B10TECH Biyoteknoloji Sanayi ve Ticaret Limited Şirketi is based in Turkey. By using our services, your data may be transferred to, stored, and processed in Turkey and other countries where our service providers operate. When we transfer personal data from the European Economic Area (EEA) to countries outside the EEA, we ensure a similar degree of protection is afforded to it by utilizing safeguards such as Standard Contractual Clauses approved by the European Commission.

6. Data Security and Retention

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. Your Legal Rights (GDPR)

Under the GDPR, if you are a resident of the European Union, you have the following rights regarding your personal data:

• Right to Access: Request access to your personal data.
• Right to Rectification: Request correction of the personal data that we hold about you.
• Right to Erasure: Request erasure of your personal data ("right to be forgotten").
• Right to Restriction of Processing: Object to or request the restriction of processing of your personal data.
• Right to Data Portability: Request the transfer of your personal data to you or to a third party.
• Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us at info@ivdr.net. We try to respond to all legitimate requests within one month.