OpencartExtra.com is operated by W3 Bilişim Teknolojileri ve Yazılım Hizmetleri Ltd. Şti. This policy explains how we process your personal data when you visit our website and use our services.
1. Data Controller
The data controller is W3 Bilişim Teknolojileri ve Yazılım Hizmetleri Limited Şirketi (Cevizli Mah. Mustafa Kemal Cad. Hukukçular Tower Sitesi A Blok No: 66A D:111 Kartal / Istanbul, Türkiye; hello@w3.net.tr; +90 532 476 9667).
2. Data We Collect
Through quote and contact forms: name, e-mail, phone, company/store name, website URL, project description and files you upload. During service delivery: store admin access, server credentials and technical data from your store. On the website: IP address, browser information, pages visited and cookie data. Via WhatsApp or e-mail: the content of messages you share.
3. Purposes and Legal Bases
We process data to assess your request and issue a quotation (pre-contractual steps), to deliver and invoice services (contract performance and legal obligation), to answer support requests, to improve our services and website (legitimate interest), and — with your consent — to send our newsletter.
4. Access to Store Data
During work we may access customer and order data in your store. We process such data only to perform the requested work, as a processor acting on your instructions; we do not copy or reuse it and delete local copies when the work ends. A data processing agreement is signed on request.
5. Sharing
We do not share your data with third parties except as required by law, with our service providers (cloud infrastructure, e-mail, forms and analytics) and with our accounting and legal advisers. Providers are bound by confidentiality and data processing agreements. International transfers comply with applicable Turkish (KVKK) and, where relevant, EU requirements.
6. Retention
Quote requests are kept for 2 years; contracts and invoices for 10 years as required by law; credentials for the duration of the service and at most 30 days thereafter; website logs for 6 months. Data is then deleted or anonymized.
7. Security
Data is protected by encrypted connections (TLS), access controls, encrypted credential storage and regular backups. Credentials are shared only with the engineer assigned to your work. In the event of a breach, affected persons and authorities are notified as required by law.
8. Your Rights
You may exercise your rights under KVKK art. 11 and, where applicable, the GDPR (access, rectification, erasure, objection, portability, withdrawal of consent) by writing to hello@w3.net.tr. Requests are answered within 30 days at the latest.
9. Changes
This policy may be updated; the current version and effective date are published on this page.