1. Data Controller
This Privacy Policy applies to the liber.tr website operated by Liber Teknoloji. Your personal data is processed by Liber Teknoloji as data controller under Turkish Personal Data Protection Law No. 6698 (KVKK) and applicable regulations.
2. Personal Data Collected
Account and Transaction Data
- First and last name
- E-mail address and phone number
- Company name and tax number (for corporate customers)
- Billing address
- Order history and license records
Technical Data
- IP address and browser type (for security and fraud prevention)
- Session cookie — to maintain your account session
- Language preference cookie — to remember your interface language
Payment Data
Sensitive payment information such as card numbers is never stored on our servers. All payment transactions are handled through PCI DSS-compliant iyzico infrastructure.
3. Purposes of Processing
- Order processing, invoicing, and digital product delivery
- Membership and account management
- Customer service and technical support
- Fulfilling legal obligations (tax, accounting)
- System security and fraud detection
- Service quality improvement (anonymous statistics)
4. Data Sharing
Your personal data is not shared, sold, or rented to third parties except in the following cases:
- iyzico: Minimum necessary data for payment processing
- Hosting and infrastructure providers: Under confidentiality agreements
- Authorised public authorities: When required by law
- Financial advisor: For invoicing and tax compliance
5. Cookies
We use only two cookies:
- liber_sess — Session management (30 days)
- liber_lang — Language preference (1 year)
No third-party advertising or tracking cookies are used. You can disable cookies in your browser settings; however, some site features may not function.
6. Data Security
- The site is encrypted with HTTPS/SSL.
- Passwords are hashed using bcrypt (cost factor 12); plaintext is never stored.
- Session cookies are flagged with HttpOnly, Secure, and SameSite=Strict.
- CSRF token protection is applied on all form submissions.
7. Retention Periods
- Account and order records: Until account deletion or as required by law (10 years under Turkish Commercial Code)
- Session data: Deleted on session termination
- System logs: 90 days
8. Your Rights
To exercise your rights under Article 11 of KVKK, please write to [email protected]. Requests are answered free of charge within 30 days. For detailed information, please review our KVKK Notice.
9. Updates
This policy may be updated from time to time. You will be notified of significant changes via your registered e-mail address.
10. Contact
[email protected]