Privacy Policy

SMS and Mobile Messaging

This section applies specifically to SMS and other mobile text messages sent by Teamso to users of the Service. With respect to mobile phone numbers and messaging consent, this section prevails over every other section of this Policy.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How we collect your mobile number and your consent. We collect your mobile phone number only when you provide it to us directly. During account registration, or at any time from the account settings of the Teamso application, you may enter and verify your mobile phone number and consent to receive SMS messages by ticking a separate, optional consent checkbox. This checkbox is unchecked by default and is presented separately from the acceptance of our User Agreement and this Privacy Policy, so that consent to receive SMS is never a condition of creating an account or of purchasing any service. We do not buy, rent, or otherwise obtain mobile phone numbers from third parties for messaging purposes.

What we send. SMS messages sent to users who have opted in are transactional and service related. They may include account verification notifications, subscription initiation and status updates, payment and renewal notifications, and important service related account updates. We do not send marketing or promotional SMS messages.

Service providers. Mobile phone numbers and messaging consent records are disclosed only to the licensed communication service providers that are strictly necessary to deliver the messages you have asked to receive. These providers act as data processors on our behalf, are bound by written confidentiality and data processing obligations, and are not permitted to use this information for their own purposes or for any marketing or promotional purpose.

How to opt out. You may stop receiving SMS messages at any time by replying STOP, CANCEL, END, QUIT, UNSUBSCRIBE or STOPALL to any message you receive from us. After you opt out we will send a single confirmation message and no further SMS messages will be sent to your number. You can resubscribe at any time by replying START. For assistance, reply HELP or INFO, or contact us at [email protected].

Frequency and cost. Message frequency varies depending on the activity of your account. Message and data rates may apply, and these charges are set by your mobile carrier, not by Teamso.

Retention and withdrawal of consent. We retain your mobile phone number and the record of your messaging consent for as long as your Teamso account remains active and for the retention periods required by applicable law, so that we are able to demonstrate that valid consent was obtained. You may withdraw your consent at any time using the opt-out methods described above, by turning off the SMS consent option in your account settings, or by contacting us at [email protected].

Personal Data We Collect

Account and contact data. Your name and surname, business e-mail address, mobile phone number, job title, company name and company address, together with the encrypted credentials used to secure your account. We collect this data when you or your company administrator creates your account.

Messaging consent data. Whether you have opted in to receive SMS messages, and the date and time of each opt-in or opt-out. See the 'SMS and Mobile Messaging' section above.

Billing data. Your subscription plan, billing address, invoice records and payment status. Payment card details are transmitted directly to the relevant bank or payment institution over an encrypted connection and are never stored on Teamso systems.

Content you upload. The employee, payroll, leave, project and other business records that you or your company administrator enter into the application. Teamso processes this content on behalf of your company and solely for the purpose of providing the Service.

Technical and usage data. IP address, browser and device information, operating system, pages visited, feature usage and server log records, collected automatically while you use the Service.

Mobile app and time attendance (PDKS) data. If your company uses the PDKS time attendance module, we use your location (precise and approximate) only at the moment you check in or out, and only with your device permission, to verify that you are at the workplace; and your camera to scan the QR code and, if your company requires it, to take a check-in/out photo. We do not track your location in the background or outside check-in/out. Photos and documents you upload in the app (e.g. expense receipts, medical reports) are processed as “Content you upload” above. The mobile app also collects a device notification token to deliver notifications and crash reports to fix errors; Google Firebase is used as a service provider for these. You can turn off location and camera permissions in your device settings at any time.

Support data. The content of the messages, e-mails and attachments you send us when you contact our support team.

How We Use Your Data

Providing the Service. Creating and maintaining your account, authenticating you, making the features of the application available to you and providing customer support. Legal ground: performance of a contract.

Billing. Managing subscriptions, processing payments and issuing invoices. Legal ground: performance of a contract and compliance with our legal obligations.

Transactional notifications. Sending account, subscription, payment and service notifications by e-mail and, where you have opted in, by SMS as described in the 'SMS and Mobile Messaging' section.

Security and fraud prevention. Detecting, investigating and preventing unauthorised access, abuse and security incidents, and maintaining audit logs. Legal ground: our legitimate interests.

Legal compliance. Meeting our obligations under tax, commercial and electronic communications legislation, including the retention of connection records required by Law No. 5651. Legal ground: compliance with a legal obligation.

Product communications by e-mail. Where you or your company administrator have agreed to receive them, we may send product news, feature announcements and campaign information by e-mail. You can unsubscribe at any time using the link in the message or by writing to [email protected]. Mobile phone numbers are never used for these communications.

Statistics and product improvement. Producing aggregated and anonymised statistics to understand how the Service is used and to improve it. This analysis does not identify individual users.

How We Share Your Data

We do not sell, rent or licence your personal data. We disclose personal data only in the limited circumstances described below.

Service providers. Hosting, infrastructure, e-mail delivery, payment and communication providers that process data on our behalf. They act as data processors, are bound by written contracts, may act only on our documented instructions, and may not use the data for their own purposes.

Your own organisation. If you use Teamso through a corporate account, the administrator of that account can access the account data and the content associated with your user.

Legal requests. Where disclosure is required in order to comply with a binding request from a competent court, prosecutor, regulator or other public authority, or with an obligation imposed by law.

Establishing and defending claims. Where disclosure is necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of Teamso, our users or the public.

Mobile information is excluded. Mobile phone numbers, text messaging originator opt-in data and messaging consent are excluded from every sharing arrangement described in this section, other than the communication providers strictly necessary to deliver the messages you requested. They are never shared with third parties or affiliates for marketing or promotional purposes.

Data Security

Technical measures. Traffic between your device and the Service is encrypted in transit using TLS. Credentials are stored using one way hashing. We apply network segregation, regular patching, and logging and monitoring of access to production systems.

Organisational measures. Access to personal data is limited to the personnel who need it in order to perform their duties, subject to authorisation controls and written confidentiality undertakings. Our staff receive data protection training.

Payment security. Card details entered for subscription payments are encrypted and transmitted directly to the relevant bank or payment institution. Teamso cannot view or store full card numbers.

Protecting your account. Never include your password or full payment card number in e-mails or support messages sent to us, as the contents of e-mail cannot be guaranteed to remain confidential. If you believe your account has been compromised, contact [email protected] immediately.

No system can be guaranteed to be completely secure. Where a personal data breach is likely to result in a risk to your rights, we will notify you and the competent authority within the periods required by law.

Data Retention

We keep personal data only for as long as it is needed for the purposes described in this Policy, and thereafter for the periods required by applicable legislation. When a retention period expires, the data is deleted or anonymised.

Account and content data are kept for as long as your account remains active. After your account is closed, the data is deleted or anonymised at the end of the applicable statutory retention periods.

Billing and invoice records are kept for ten years, in line with Turkish tax and commercial legislation.

Connection and log records are kept for the periods required by Law No. 5651.

Mobile numbers and messaging consent records are kept for as long as your account is active and for the statutory retention period afterwards, so that we can demonstrate that valid consent was obtained.

Your Rights

Under Article 11 of the KVKK and other applicable legislation, you may: learn whether your personal data is being processed; request information about the processing; learn the purpose of the processing and whether the data is used accordingly; know the third parties to whom the data is transferred; request the correction of incomplete or inaccurate data; request erasure or destruction; request that any correction or erasure be notified to the parties to whom the data was transferred; object to a result produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

You may also withdraw any consent you have given, including your SMS consent, at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights, write to [email protected] or use the Interested Person Application Form published on our website. We respond within thirty days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority.

Cookies

What cookies are. Cookies are small text files that a website sends to your browser to be stored on your device. They allow a site to remember your actions and preferences between visits.

How we use them. We use strictly necessary cookies to keep you signed in and to protect your session, preference cookies to remember settings such as your language, and analytics cookies to understand in aggregate how the Service is used and which features are most useful.

Managing cookies. Most browsers are set to accept cookies by default. You can change your browser settings to refuse cookies or to warn you when one is sent. Disabling strictly necessary cookies will prevent parts of the Service from working correctly.

Cookies are not designed to retrieve data from your device memory or from your e-mail, and we do not use them for that purpose.

Third Party Web Sites and Applications

The Service may contain links to websites and applications operated by others. This Policy does not apply to them, and we accept no responsibility for their content or for their privacy practices.

Before providing personal data to a third party website, please read that site's own privacy policy.

Age Limit

The Service is intended for people aged 18 or over and is not directed at children. You should not use the Service if you are under 18. If we become aware that we hold personal data belonging to a person under 18, we will delete it without undue delay.

Changes to This Policy

We may update this Policy to reflect changes in the Service or in applicable legislation. The 'last updated' date shown at the beginning of this page indicates when it was last revised.

If we make a material change, we will notify you through the Service or by e-mail before the change takes effect. The updated Policy becomes effective on the date it is published.

Contact Us

If you have any questions, requests or complaints regarding this Policy or the way we handle your personal data, please contact us.

Company: Teamso Teknoloji Anonim Şirketi
Address: Bağdat Cad. No:492 D:1, Bostancı, Kadıköy / İstanbul, Türkiye
E-mail: [email protected]