Privacy Policy
Last updated: 2026
This policy explains how VIPKART processes personal data. We are GDPR-native and host our core data within the EU.
Data controller
VİP KART SİSTEMLERİ LİMİTED ŞİRKETİ, Oruçreis Mah. Giyimkent Sitesi 16. Sk. No:81/A, 34235 Esenler / İstanbul / Türkiye. İletişim: info@vipkart.com.tr · +90 212 437 2 437. MERSIS: 0925049288400012.
Where your data is hosted
Your account, profiles and visitor statistics are hosted within the EU (Hetzner, Germany/Finland). A small number of sub-processors may process limited data outside the EU under appropriate safeguards — see International transfers.
Data we process
Account: email, name, password (hashed). Profile content: whatever you choose to publish. Visitor statistics: 2-letter country and referrer host only, we never store raw IP addresses and use no cookies or fingerprinting for analytics. Contact/lead data — only if you use the contact form or the AI card scanner: the name, title, company, email and phone of the person you add. You act as the data controller for that contact and are responsible for having a lawful basis to add them. AI card scanner: the card photo you upload is sent to Google's Gemini API to read these details; it is not used to train Google's models.
Purposes and legal bases
Account and service: performance of contract (Art. 6(1)(b)). Anonymous page views: legitimate interest (Art. 6(1)(f)). Interaction statistics from your device: consent (Art. 6(1)(a)). Email verification: contract. AI card scanner and contact capture: our and your legitimate interest in building your contact list (Art. 6(1)(f)).
Retention
Account data: until you delete it. Anonymous statistics: up to 14 months. Verification tokens: 24h / 1h. Lead/contact data: until you or the profile owner delete it.
Your rights
You can access, export, rectify and erase your data, and object to or restrict processing. Use the self-service tools in your account, or contact us.
International transfers
Your account, profiles and statistics stay within the EU. The optional AI card scanner sends the uploaded card photo to Google's Gemini API, which may process it outside the EU (e.g. the United States); this transfer relies on the EU Standard Contractual Clauses and Google's Data Processing Addendum. If you do not use the AI card scanner, no personal data leaves the EU.
Supervisory authority
Kişisel verilerinize ilişkin şikâyetlerinizi Kişisel Verileri Koruma Kurumu'na (KVKK) iletebilirsiniz.
Contact
privacy [at] vipkart.eu