+90 312 417 76 53 bupatltd@bupat.com.tr
TR|EN
Get a Quote

Data Processing Agreement

Data Processing Agreement

This Data Processing Agreement (“Agreement”) is made between BUPAT LTD and BUPAT GLOBAL LLC (hereinafter referred to as the “Data Processor”) and the customer or website user (hereinafter referred to as the “Data Controller”). This Agreement regulates the rights and obligations of the parties regarding the protection of personal data processed within the scope of services offered by BUPAT LTD and BUPAT GLOBAL LLC.

1. Definitions

1.1 Personal Data: Refers to any information belonging to an identified or identifiable real person.

1.2 Data Controller: Refers to the real or legal person who determines the purposes and means of processing personal data.

1.3 Data Processor: Refers to the real or legal person who processes personal data on behalf of the Data Controller.

1.4 Data Subject: Refers to the real person whose personal data is processed.

2. Scope and Purposes of Data Processing

2.1 The Data Processor shall process personal data only in accordance with the instructions of the Data Controller. The purpose of processing personal data is the execution of services determined by the Data Controller.

2.2 Processing activities will be carried out within the scope of agreements made with the Data Controller and in line with the following services:

  • Providing website services
  • Customer services
  • Marketing activities (if permitted)

2.3 Processed personal data shall be collected only for specific, explicit, and legitimate purposes and shall not be used in a way incompatible with these purposes.

3. Data Security

3.1 The Data Processor undertakes to take technical and organizational measures for the protection of personal data. These measures will be applied to prevent unauthorized access, loss, modification, or destruction of data.

3.2 The Data Processor permits only authorized person to access personal data and ensures that this person is subject to confidentiality obligations.

4. Sub-processors

4.1 The Data Processor cannot apply to third-party sub-processors to process personal data without the prior written consent of the Data Controller.

4.2 The Data Processor is responsible for ensuring that sub-processors also act in accordance with the obligations specified under this Agreement.

5. Rights of the Data Subject

5.1 The Data Controller is responsible for fulfilling the rights of the Data Subject, such as correction, deletion, or access to personal data. The Data Processor will assist the Data Controller in fulfilling these requests.

5.2 When the Data Processor receives any Data Subject request, it will immediately forward the request to the Data Controller.

6. Return or Deletion of Data

6.1 Upon termination of this Agreement or request of the Data Controller, the Data Processor shall either delete or return the personal data it processes to the Data Controller.

6.2 In cases where certain data must be stored in line with legal obligations, the Data Processor may only retain these data and must delete other data.

7. Audits

7.1 The Data Controller may perform audits at regular intervals or when necessary to audit the compliance of data processing activities with this Agreement and applicable data protection laws.

7.2 The Data Processor is obliged to provide the necessary information to the Data Controller in these audits.

8. Liability and Indemnity

8.1 The Data Processor cannot be held responsible for data breaches arising from data processing activities, unless it is proven that the breach resulted from a transaction contrary to data protection obligations.

8.2 The Data Processor is only responsible for the processes of data processing in line with legal regulations and the duties given under this Agreement.

9. Validity and Termination

9.1 This Agreement shall remain valid until the service relationship between the Data Controller and the Data Processor ends.

9.2 Either party may terminate this Agreement by written notice if the other party violates its obligations.

10. Contact Details

In case of any questions or requests, you can contact us at the following addresses: