Cookie Policy

This Cookie Policy explains the cookies and similar technologies used on the following domains (the “Site”) operated by Consphera Teknoloji ve Yönetim Danışmanlığı Ltd. Şti. (“Company”, “we”):

• easycustoms360.com, tr.easycustoms360.com and their subdomains

This notice is prepared to fulfil our information duties under the Turkish Data Protection Law (KVKK) and, where applicable, the EU GDPR.

1) What is a cookie? What are similar technologies?

A “cookie” is a small text file stored on your browser/device when you visit a website. Similar technologies include local storage (localStorage/sessionStorage), pixel tags, SDKs and cookie-like identifiers. These technologies are used for purposes such as maintaining sessions, security, remembering preferences and measuring Site performance.

2) Types of cookies

By duration

• Session cookies: Deleted when the browser is closed.
• Persistent cookies: Remain on the device for a defined period.

By source

• First-party: Placed directly by the Site.
• Third-party: Placed by our partners/service providers.

By purpose

• Strictly necessary: Site operation, security, fraud prevention. (No consent required.)
• Preferences/Functionality: Remembers language, currency, appearance, etc.
• Performance/Analytics: Measures usage and engagement to drive improvements.
• Advertising/Targeting: Delivers interest-based content and measurement.

3) What data is processed?

Through cookies and similar tech we may process: masked IP, device/browser info, session/cookie ID, referrer page, clickstream, viewed pages, form interactions, preferred language, timestamps and pseudonymous identifiers in advertising categories. Where possible, your data is processed in aggregated/anonymous or pseudonymized form.

4) Why we use cookies

• Authentication, session management, load balancing and security
• Account operations, payments and fraud prevention
• Remembering preferences such as language/currency/tenant
• Performance/analytics measurement and product/UX improvements
• Effective display of campaigns, announcements and service promotions

5) Legal basis

Strictly necessary cookies: Legal obligation and/or legitimate interests (KVKK Art.5/2; GDPR Art.6(1)(c)-(f)).
Preferences, Analytics, Advertising cookies: Consent (KVKK Art.5/1; GDPR Art.6(1)(a)).

You can give, update or withdraw your consent at any time via the Cookie Management Panel.

Prior blocking: Cookies requiring consent are not triggered until consent is given.

6) Third-party providers and international transfers

We may use third-party services for analytics, security, payments, marketing/communications and hosting. Cookies set by these providers are subject to their own policies and retention schemes; data may be transferred abroad. Appropriate safeguards (e.g., adequacy decisions, Standard Contractual Clauses – SCCs, explicit consent) are applied for transfers.

• Analytics/Performance: Google Analytics / Plausible / Vercel Analytics (IP anonymization can be enabled).
• Security/Performance: Cloudflare, (if needed) reCAPTCHA.
• Payments & Tax: PSP(transaction security, tax compliance, fraud prevention).
• Marketing/Comms: Meta Pixel, LinkedIn Insight Tag, email services.
• Infrastructure/Session: Authentication, hosting and CDN services (e.g., Supabase Auth).

7) How to manage cookies

• Cookie Management Panel: Use the banner or the “Cookie Preferences” link in the footer to enable/disable categories.
• Browser settings: Most browsers allow blocking/deleting cookies.
• Device/ads preferences: You may reset mobile ad IDs and limit interest-based ads.

Note: Disabling strictly necessary cookies may affect core Site functions and cause service interruptions.

8) Retention

• Session cookies: Until the browser is closed.
• Persistent cookies: 1 day to 24 months proportionate to purpose (varies by provider).

Up-to-date granular durations are published in the Cookie Management Panel and in Annex A.

9) Consent logs, IP anonymization and multi-tenant note

• Consent logs: Preferences are stored per category with timestamp and a technical identifier. You can withdraw consent at any time.
• IP anonymization: Where possible, IP truncation/masking is applied in analytics.
• Multi-tenant note: This policy applies to all domains listed above and their subdomains. Tenant/country differences are reflected in the Panel and Annex A.

10) Your rights (KVKK and GDPR)

Under KVKK and (where applicable) GDPR you have the following rights:

• Access, rectification/update, erasure (right to be forgotten)
• Restriction of processing, objection
• Data portability (GDPR)
• Withdraw consent
• Request information on international transfers

Submit your requests via the channels in the Contact section. We respond within 30 days at the latest.

Supervisory authority: If dissatisfied with our response, you may complain to the Turkish DPA (KVKK) or, if you reside in the EU, to your national Data Protection Authority.

11) Children’s privacy

Our services target adult users; we do not aim at children. If we become aware that we process children’s data, we take necessary measures and delete the data as soon as possible.

12) Changes to this Policy

We may update this Policy due to changes in our services or the law. The latest version is always available on this page; the effective and last update dates are shown above. Where necessary, we provide additional notice.

13) Contact

Data Controller: Consphera Teknoloji ve Yönetim Danışmanlığı Ltd. Şti.
Address: Nisbetiye Mahallesi, Nisbetiye Caddesi No:24 Da:17 Beşiktaş /İSTANBUL
Email: support@easycustoms360.com

Annex A — Cookies used (example template; update according to your setup)

Note: Cookie names/durations may change due to provider updates.