Privacy Policy

Last updated: October 2026

This notice explains how we process personal data on notilussoftware.com and its subdomains. It is our information notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, under the GDPR.

1. Data controller

Notilus Yat Tasarım Mühendislik Bilgisayar Sanayi Ticaret Limited Şirketi (Notilus Software), Liman Mah. 32. Sokak, Ahmet Bileydi İş Merkezi No: 8 Kat: 3 Daire: 6, Konyaaltı / Antalya, Türkiye · info@notilussoftware.com

2. Data we process and why

Account and purchases: contact, billing and order details, to create your account, conclude and perform the sales contract, deliver licences and issue invoices.
Enquiries and support: your contact details and message, to answer you and issue trial licences.
Newsletter: your email address, to send product news, only with your consent.
Website and downloads: IP address, browser data and download records, to run and secure the website and our software.
Cookies: as described in section 5.

We collect this data electronically through the website, its forms and checkout, cookies and our servers. The legal grounds are the performance of a contract, our legal obligations, our legitimate interest in running and securing our services, and your consent for the newsletter and for analytics and advertising cookies. Account and order data are needed to sell you a licence; without them we cannot complete the order. We do not make automated decisions about you.

3. Recipients

Where needed for the purposes above, we share data with our payment provider (PayTR), our hosting and IT service providers, Google (email, and the services in section 5), our accountants and legal advisers, and public authorities when the law requires it.

4. Transfers abroad

Google may process data outside Türkiye, including in the United States. These transfers are made under the safeguards of Article 9 of the KVKK and the GDPR, or, for analytics and advertising cookies, with your explicit consent.

5. Cookies

Necessary (Notilus, Google reCAPTCHA): sign-in, cart, your cookie choice and form security. Kept for the session, up to 12 months for your cookie choice.
Analytics and advertising (Google Analytics, Google Ads): used only if you accept them. Kept for up to 2 years.
Embedded videos (YouTube): set by YouTube when a video player loads.

You can change your choice at any time in .

6. Retention

We keep personal data only as long as the purposes above require or the law obliges us; order and invoice records are kept for 10 years under Turkish commercial and tax law. Afterwards the data is deleted or anonymised.

7. Your rights

Under Article 11 of the KVKK and, where applicable, the GDPR, you may ask whether we process your data and for information about it, its purpose and its recipients; have it corrected or deleted; object to processing; receive it in a portable format; withdraw your consent at any time; and claim compensation for unlawful processing. Send your request to info@notilussoftware.com or to our address; we answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority or, under the GDPR, to your local data protection authority.