1. Data Controller
SMT ILETISIM VE BILGI TEKNOLOJILERI MIMARLIK DANISMANLIK YAPI TICARET ANONIM SIRKETI acts as the data controller for personal data processed under this Privacy Policy.
- Email: info@superxml.com
- Phone: +90 538 481 8567
- Address: Merdivenkoy Mah. Nur Sk. No: 1/1 K:12 D:115 Ic Kapi: 2, Business Istanbul, Kadikoy, Istanbul, Turkiye
2. Scope
This Privacy Policy applies to personal data processed through:
- public website pages, forms, and communication channels,
- customer account creation and login flows,
- license provisioning and validation processes,
- support interactions and billing-related operations.
3. Categories of Personal Data
- Identity and contact data: name, email address, account domain, and support communication details.
- Transaction data: purchased package information, order status, invoice-related metadata, and payment references from payment processors.
- Technical data: IP-related logs, device/browser metadata, and security events required for service integrity.
- License data: store domain, license key status, activation records, and validation requests.
4. Purposes and Legal Grounds
Personal data is processed only for legitimate and defined purposes, including:
- creating and managing customer accounts,
- processing orders and delivering digital licenses,
- operating license validation and fraud-prevention controls,
- responding to support requests and legal obligations,
- ensuring service security, auditability, and operational continuity.
5. Payment and Third-Party Services
Payments are processed by authorized third-party providers. Super XML does not store full card numbers or sensitive payment credentials in its own systems. Third-party processors may handle personal data under their own privacy terms and compliance frameworks.
6. Cookies and Similar Technologies
The website may use essential cookies and technical storage for session management, language preference, security controls, and user experience continuity. Non-essential analytics or marketing cookies, if used, should be governed by explicit notice and applicable consent mechanisms.
7. Data Sharing and Disclosure
Personal data is not sold. Data may be disclosed only where required for service delivery, legal compliance, payment operations, fraud prevention, professional advisory services, or enforcement of contractual rights.
8. International Data Transfers
If data is processed or stored outside Turkiye, Super XML applies reasonable technical and organizational safeguards and contractual controls intended to preserve confidentiality, integrity, and lawful processing standards.
9. Data Retention
Personal data is retained only for as long as necessary for contractual performance, legal obligations, dispute handling, tax/accounting rules, security auditability, and legitimate business continuity. Data no longer required is deleted, anonymized, or archived under restricted access.
10. Data Security
Super XML applies risk-appropriate security measures, including access controls, credential protection, environment hardening, and incident monitoring. No online system can guarantee absolute security; however, commercially reasonable safeguards are continuously maintained.
11. Data Subject Rights
Subject to applicable law, users may request access, correction, deletion, restriction, objection, and portability for relevant personal data. Rights requests can be submitted to info@superxml.com.
12. Children's Data
Services are intended for business users and adults. Super XML does not knowingly collect personal data from children.
13. Updates to This Policy
This Privacy Policy may be updated to reflect legal, technical, or operational changes. The most current version is published on this page with the updated effective date.
14. Governing Law and Competent Authority
This Privacy Policy is governed by the laws of the Republic of Turkiye. For legal disputes related to this Policy, Istanbul (Turkiye) courts and enforcement offices shall have jurisdiction, without prejudice to mandatory rights granted by applicable consumer and data protection law.