Support Process Privacy Notice

Your personal data is processed under Turkish Law No. 6698 by NanoTouch [full legal name to be added] as data controller.

Address: [company address to be added] · Data-subject request channel: [KEP, email or postal address to be added].

We may process identity, contact and account data; ticket number, subject, category, messages and attachments; linked order, product and shipment context; status and staff action history; security/audit records; and your optional satisfaction score and comment.

Please do not include card data, account passwords, health data or other sensitive information that is not required to resolve the request.

Data is used to receive and answer requests, verify account and order context, assign/transfer/resolve tickets, maintain security, handle legal claims, and improve service through aggregate statistics.

Depending on the case, processing relies on Article 5/2 grounds including contract performance, legal obligation, establishment/exercise/protection of a right, and legitimate interests that do not prejudice your fundamental rights. Marketing is not part of this support flow.

Data is collected electronically through account support forms and messages, orders you link, staff actions and system security records, by automated or partly automated means.

Access is limited to authorised NanoTouch staff and contracted hosting, storage, email and security providers on a need-to-know basis. Final recipient groups must be completed from the data inventory before publication.

Any international transfer must be separately assessed under the current safeguards in Article 9. This draft is not itself an authorisation or assurance that an international transfer occurs.

The support area uses role-based access, single-staff ownership, version/conflict checks, private attachment access, malware controls and an action history. Internal notes are not shown to customers and download authorisation is checked on every request.

Duplicate-ticket detection is advisory only. No final decision about your request is made solely by an automated system.

Article 11 rights include learning whether data is processed, requesting information, learning purposes and recipients, correction, deletion/destruction where conditions apply, notification to recipients, objecting to automated analysis and seeking compensation.

Submit applications through [channel to be added]. Requests are answered within thirty days at the latest. If a statutory retention duty or legal hold prevents immediate deletion, the reason will be explained.