Controller: Consphera Teknoloji ve Yönetim Danışmanlığı Ltd. Şti. ("Consphera", "we", "us")
Registered address: Nisbetiye Mahallesi, Nisbetiye Caddesi No:24 Da:17 Beşiktaş /İSTANBUL
Contact: support@easycustoms360.com
This Notice explains how we process personal data when you use easycustoms360.com and their subdomains (e.g., tr.easycustoms360.com) and the related services branded EasyCustoms360.
1) Scope & Who this applies to
- Site visitors, account holders, and representatives of customers/prospects
- Representatives of suppliers and business partners
- Job applicants
2) Categories of personal data we process
- Identity & contact: name, title, company, email, phone.
- Account & usage: username, hashed password, preferences, session/activity logs, support tickets.
- Transaction & billing: order/contract records, invoicing/tax data.
- Payment: we do not store full card details; payments are handled by our payment provider.
- Content you submit: files/info shared for consultancy (attachments, messages).
- Technical & security: IP address, device/browser info, timestamps, error logs.
- Marketing preferences: newsletter opt-in/out, campaign interactions.
- Cookies/Similar tech: essential, analytics, functional and (with consent) marketing cookies.
We do not intentionally collect special categories of data. If your documents contain such data, please redact/mask it before sharing.
3) Purposes & legal bases (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Account registration, providing the Services, support, contract management | Contract necessity (Art. 6(1)(b)) |
| Billing, invoicing, tax & compliance | Legal obligation (Art. 6(1)(c)) |
| Security, fraud prevention, monitoring, improvement, internal reporting | Legitimate interests (Art. 6(1)(f)) |
| Newsletters, product updates, analytics/marketing cookies | Consent (Art. 6(1)(a)) |
| Handling queries, pre-contractual steps | Contract necessity (Art. 6(1)(b)) / Legitimate interests (Art. 6(1)(f)) |
| Recruitment & candidate evaluation | Legitimate interests (Art. 6(1)(f)) / Consent where required |
Legitimate interests include operating a safe, reliable platform; detecting misuse; improving features; and managing our B2B/B2C relationships.
4) Sources of data
- Directly from you (forms, uploads, support, email/phone)
- Automatically via our Services (logs, cookies)
- Your organisation (if you are its representative)
- Public or third-party sources where appropriate (e.g., sanctions/PEP screening if legally required)
5) International transfers (Arts. 44–49)
Where data is transferred outside the EEA/UK, we rely on adequacy decisions, the Standard Contractual Clauses (and the UK Addendum/IDTA as applicable) with appropriate technical/organizational measures, or your explicit consent (Art. 49(1)(a)) when required.
6) Retention
| Data | Typical retention | Rationale |
|---|---|---|
| Account/contract & invoicing records | 10 years | commercial & tax laws |
| Security & system logs | up to 2 years | security, fraud prevention, disputes |
| Marketing preferences | until withdrawn | consent management |
| Job applications | process + 1 year | applications & disputes |
| Cookies data | 6–24 months | consent/necessity |
7) Automated decision-making / profiling (Art. 22)
We use automated processing (e.g., workload scoring, pre-pricing) to assist operations. These tools support decisions and do not by themselves produce legal or similarly significant effects.
8) Cookies
Essential cookies are always on (security/session). Analytics/marketing cookies operate only with your consent. See the Cookie Policy for details and to manage preferences.
9) Your rights (EEA & UK)
- Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17)
- Restriction (Art. 18), Portability (Art. 20)
- Object to processing based on legitimate interests and to profiling (Art. 21)
- Withdraw consent at any time (without affecting past processing)
- Not to be subject to decisions based solely on automated processing with legal/similar significant effects (Art. 22)
10) How to exercise your rights
Email: support@easycustoms360.com
We respond within one month (extendable where permitted). We may verify identity and, where requests are excessive, charge a reasonable fee.
11) Complaints
You may lodge a complaint with your local Supervisory Authority (EEA list via EDPB; UK: ICO). We would appreciate the chance to resolve your concerns first.
12) Security
We implement technical, organisational and contractual measures (encryption in transit, access controls, backups, logging/monitoring, vulnerability management and supplier due diligence). In case of a personal data breach, we assess and notify authorities and affected individuals when legally required.
13) Children
Our Services are intended for adults; we do not knowingly collect data from persons under 18. If you believe a minor has provided data, contact us to remove it.
14) Changes to this Notice
We may update this Notice. The updated version becomes effective when posted. For material changes, we will provide a prominent notice.
15) Contact
Consphera Teknoloji ve Yönetim Danışmanlığı Ltd. Şti.
Nisbetiye Mahallesi, Nisbetiye Caddesi No:24 Da:17 Beşiktaş /İSTANBUL
support@easycustoms360.com