Personal Data Protection At IONSIS, we develop cloud-based ERP solutions that enable businesses to manage their sales, inventory, production and finance processes on a single platform. The security of the personal data you entrust to us is among the priorities of our work.
1. Introduction and Scope
As Ionic Stone Maden San. ve Tic. Ltd. Şti. ("IONSIS", "we" or the "Company"), we process the personal data of individuals who visit the ionsis.com website, fill in the contact form, request a free trial or use the IONSIS ERP service, in our capacity as data controller under the Law No. 6698 on the Protection of Personal Data ("KVKK"). This notice has been prepared to explain which of your data we process, for what purposes, and your rights regarding such data.
With respect to the data that our customers upload to IONSIS ERP for their own business (for example, their own customer account, employee or supplier records), the data controller is the customer itself. We process such data solely on our customer's instructions, in our capacity as data processor. For any requests regarding such data, you need to contact the relevant company.
2. Personal Data Collected
We may process the following personal data while providing our services:
• Form data: Your name, phone number, email address, company name, subject and message content that you share in the contact and trial request forms.
• Account and login information: The username, email address and encrypted password used when signing up for and logging in to the IONSIS application.
• Billing and financial information: The trade name, address, tax office and tax number (Turkish ID number for sole proprietorships) required for subscription and billing, together with payment records. Your credit card information is not stored on our servers.
• Technical data: IP address, browser type, device information, session and access records (logs).
• Cookie and usage data: The pages you visit, your language preference and, to the extent you have given consent, analytics cookie data.
• Correspondence and support records: Your correspondence with us and your support requests via email, phone and social media (LinkedIn, Instagram, Pinterest).
We do not request special categories of personal data (health, biometric data, etc.).
3. Purposes of Processing Personal Data
We process your personal data solely for the following purposes:
• Service provision: To create your IONSIS account, provide the ERP service and manage our subscription relationship.
• Requests and support: To respond to your information, demo and free trial requests, and to carry out support processes.
• Billing and e-documents: To carry out billing as well as e-Invoice, e-Archive and e-Waybill processes in compliance with the legislation.
• Improvement: To measure the performance of our website and service and to improve the user experience.
• Information and marketing: Subject to your consent, to send you commercial electronic messages about new features, campaigns and announcements.
• Security: To ensure information security and to prevent unauthorized access and misuse.
• Legal obligations: To fulfil obligations arising from tax, commercial and internet legislation, to respond to requests from competent authorities and to protect our legal rights.
4. Parties With Whom Personal Data May Be Shared
We do not sell your personal data. Your data may be shared with the following parties only to the extent required by the purpose:
• Hosting and cloud infrastructure providers: For the operation and backup of our website and ERP application.
• Email and notification service providers: To deliver system notifications and correspondence.
• E-document integrator (Turkcell e-Şirket): To issue e-Invoices, e-Archive invoices and e-Waybills.
• E-commerce integrations (IKAS, Shopify and others): To synchronize order and inventory information, only in the integrations you have enabled.
• Payment institutions and banks: To collect subscription payments.
• Advisors: Our financial advisors and legal counsel, to fulfil our legal obligations.
• Competent public institutions and organizations: In line with legal requests from authorities such as the Revenue Administration, courts and the Personal Data Protection Authority. The servers of some of our service providers are located abroad. We carry out these transfers in compliance with Article 9 of the KVKK by providing appropriate safeguards, such as the standard contracts published by the Personal Data Protection Board (the "Board").
5. Legal Basis for Processing
We process your personal data based on the following legal grounds set out in Article 5 of the KVKK:
• Establishment and performance of a contract: To create your account, provide the service and respond to your trial or quotation requests.
• Being expressly provided for by law and legal obligation: For billing, record-keeping and logging obligations arising from legislation such as the Tax Procedure Law, the Turkish Commercial Code and Law No. 5651.
• Establishment, exercise or protection of a right: To protect our rights in potential disputes.
• Legitimate interest: To ensure security and improve our service, provided that this does not harm your fundamental rights and freedoms.
• Explicit consent: Where no other legal ground exists, such as for sending commercial electronic messages and for analytics and marketing cookies. You may withdraw your consent at any time.
6. Rights of the Data Subject
Pursuant to Article 11 of the KVKK, you may exercise the following rights by applying to us:
• To learn whether your personal data is processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used in accordance with that purpose,
• To know the third parties to whom it is transferred domestically or abroad, • To request rectification if it has been processed incompletely or inaccurately,
• To request its erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK,
• To request that the rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred,
• To object to a result against you arising from the analysis of the processed data exclusively through automated systems,
• To request compensation for damages if you suffer damage due to unlawful processing.
You may submit your requests in person or through a notary public to our address below, with a signed petition containing your name, surname, Turkish ID number (nationality and passport number for foreign nationals), address and your request. You may also apply via KEP (registered electronic mail) to [KEP ADDRESS], or from the email address registered in our systems to bilgi@ionsis.com. We will finalize your application free of charge within 30 days at the latest; if the process requires an additional cost, the fee set out in the tariff determined by the Board may be charged. If you find our response insufficient, your right to file a complaint with the Personal Data Protection Board is reserved.
7. Protection and Retention of Personal Data
• Technical and administrative measures: We store your data in encrypted form, restrict access through role-based permissions, keep access logs and perform regular backups.
• Continuous monitoring: We regularly audit our systems for security vulnerabilities and bind our employees and service providers with confidentiality obligations.
• Data breach notification: If your data is obtained by unauthorized persons, we will notify you and the Personal Data Protection Board as soon as possible.
• Retention periods: We retain your data for as long as required by the legislation or by the purpose of processing. For example, invoices and commercial records are retained for 10 years, access logs for 2 years, and form requests that do not result in a customer relationship for 2 years. At the end of the period, the data is erased, destroyed or anonymized. Data you upload to the ERP is deleted within 30 days after the contract ends.
8. Keeping Data Accurate and Up to Date
• It is important that the information you share with us is accurate and up to date so that we can serve you better.
• You can update your account and billing information through the IONSIS application and notify us of any other changes.
• IONSIS cannot be held responsible for any consequences arising from incomplete or incorrect information provided.
9. Changes and Notification
• We may update this notice in line with changes in the legislation or in our processing activities.
• The current notice is always published on ionsis.com and becomes effective as of its publication date.
• We recommend that you review the current notice regularly. Last updated: 01.11.2026.
10. Contact
You can contact us with any questions regarding this notice or your personal data:
- Company: Ionic Stone Maden San. ve Tic. Ltd. Şti.
- Address: Pamukkale Üniversitesi Teknokent, Hüseyin Yılmaz Cd. No:67, D Blok 210-211, 20160 Denizli, Türkiye
- Email: bilgi@ionsis.com
- Phone: +90 258 814 57 47