1. Scope
This Privacy Policy explains how personal data is collected, used, shared and protected when you use the solarVis Market mobile application for iOS and Android (the “App”) and the solarVis Market B2B marketplace it connects to (together, the “Service”). SolarVis Market is a business-to-business marketplace for solar energy equipment and is intended for professional users acting on behalf of a company.
The solarVis website and design platform are covered by the general solarVis Privacy Policy. A Turkish privacy notice covering Law No. 6698 (KVKK) is available at solarvis.co/tr/legal/privacy.
2. Who we are
The data controller is ELECTRAVIS TEKNOLOJİ ANONİM ŞİRKETİ (“solarVis”, “we”, “us”), Üniversiteler Mah. İhsan Doğramacı Bul. No: 27 İç Kapı No: B16, Çankaya, Ankara, Türkiye.
Privacy enquiries: privacy@solarvis.co. KVKK requests: kvkk@solarvis.co.
3. Data we collect
| Category | Examples | How we get it |
|---|---|---|
| Account and identity data | Name and surname, job title, password (stored in hashed form), national ID number where needed to verify an authorised company representative | You provide it when registering |
| Contact data | Work email address, work phone number, company and delivery addresses | You provide it |
| Company verification data | Company name, tax number, tax certificate, trade registry records, signature circular, authorisation documents and installer certificates | You provide or upload it during buyer verification |
| Order and transaction data | Products viewed and ordered, quotes, order history, delivery details, invoices | Generated when you use the Service |
| Payment data | Payment status, amount and transaction reference. If you save a card for later purchases, we keep only the card token issued by our payment provider and the last four digits of the card. We do not store the full card number or the security code (CVV). | You provide it at checkout; from our payment provider |
| Device and usage data | IP address, device model, operating system and app version, language, screens viewed, actions taken in the App, login and logout records, diagnostic and crash logs | Collected automatically by the App |
| Push notification token | A device identifier issued by Apple or Google that lets us send notifications | Collected if you allow notifications |
| Communications | Messages you send to support by email, phone, SMS, WhatsApp or in-app forms | You provide it |
| Preferences and consents | Marketing permission status, records of the terms and consents you accepted | You provide it; generated by the Service |
We do not collect special categories of personal data, and the App does not request access to your contacts or your location.
4. Device permissions
The App asks for the following permissions only when a feature needs them. You can refuse or withdraw any of them in your device settings; the related feature will then be unavailable, but the rest of the App keeps working.
| Permission | Why we ask |
|---|---|
| Notifications | To inform you about order status, quotes, verification results and, if you have opted in, offers |
| Camera | To photograph and upload company documents during verification |
| Photos and files | To attach existing documents or images |
5. Why we use your data and our legal bases
| Purpose | Data used | Legal basis (GDPR / KVKK) |
|---|---|---|
| Creating and managing your account and company membership | Account, contact, company verification | Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2(c)) |
| Verifying that the applicant is a real business qualified to buy solar equipment, and that the representative is authorised | Account, company verification | Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5/2(f)) |
| Showing trade prices and stock to verified buyers; processing orders, delivery, invoicing and warranty | Account, contact, order and transaction, payment | Performance of a contract |
| Sending service notifications about orders and your account | Contact, push notification token | Performance of a contract |
| Keeping the Service secure, preventing fraud, fixing errors and crashes | Device and usage | Legitimate interests; legal obligation (KVKK Art. 5/2(a) and (ç)) |
| Measuring and improving the App | Device and usage | Legitimate interests, or consent where the law requires it |
| Sending offers, campaigns and sector news by email, SMS, phone or push | Contact, order history, preferences | Consent (GDPR Art. 6(1)(a); KVKK Art. 5/1 and Turkish Law No. 6563) |
| Meeting tax, accounting and commercial record-keeping duties and answering lawful requests from authorities | Account, order and transaction, consents | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5/2(ç)) |
We do not use your data for decisions based solely on automated processing that produce legal or similarly significant effects on you.
6. Who we share data with
We do not sell personal data. We do not use your data for third-party advertising and do not track you across other companies’ apps or websites. We share data only with the following recipients, and only as far as each purpose requires.
| Recipient | What is shared | Why |
|---|---|---|
| Suppliers and manufacturers on the marketplace | Company name, contact person, order and delivery details | To supply and ship the products you order and handle warranty claims |
| Logistics and carrier companies | Recipient name, phone number, delivery address | To deliver your order |
| Payment provider: Moka | Card details, payment amount and transaction details | To process payments and keep saved cards |
| Cloud hosting provider: Amazon Web Services (Frankfurt, Germany) | All data stored in the Service | To host and operate the Service |
| Push notification services: Apple Push Notification service, Google Firebase Cloud Messaging | Push token, notification content | To deliver notifications |
| Analytics provider: Google Analytics | Device and usage data | To understand how the App is used |
| Crash reporting provider: Sentry | Diagnostic and crash logs, device model, OS version | To find and fix errors |
| Email and SMS providers: Twilio (email), Netgsm (SMS) | Email address, phone number, message content | To send verification codes, service messages and, with your consent, marketing |
| CRM provider: HubSpot | Contact data, communication history | To manage customer relationships and support |
| Public authorities and courts | Data required by law | To meet legal obligations, including tax authorities and the Turkish Message Management System (İYS) |
Service providers act on our instructions under data processing agreements. If solarVis is involved in a merger, acquisition or asset sale, personal data may be transferred to the successor, which will remain bound by this Policy.
7. International transfers
Depending on the provider, your data may be processed in Türkiye, the European Economic Area, the United Kingdom and the United States. Where data leaves your country, we rely on a mechanism recognised by the applicable law: adequacy decisions, Standard Contractual Clauses, the safeguards in Article 9 of KVKK, or your explicit consent where no other mechanism applies.
8. How long we keep data
| Data | Retention period |
|---|---|
| Account, contact and company verification data | For as long as your membership is active, then 10 years where commercial and tax law requires records to be kept |
| Order, invoice and transaction records | 10 years from the transaction, under Turkish commercial and tax law |
| Rejected or abandoned membership applications | 6 months after the decision or last activity |
| Security and access logs | 2 years |
| Diagnostic and crash logs | 90 days |
| Analytics data | Up to 14 months in identifiable form, then aggregated or anonymised |
| Marketing permissions and data | Until you withdraw consent, plus the period the law requires proof of consent to be kept |
| Push notification token | Until you turn off notifications, sign out or uninstall the App |
Saved card data is kept until you remove the card or delete your account. When a period ends, data is deleted, destroyed or anonymised.
9. Security
We protect personal data with encryption in transit, access controls based on least privilege, audit logging and regular review of our systems. Production data is hosted on Amazon Web Services in Frankfurt, Germany. Passwords are stored in hashed form and sign-in tokens are kept in the secure storage of your device. No system is completely secure; if a breach affects your data we will notify you and the competent authority as the law requires.
10. Deleting your account and data
You can delete your account at any time:
- In the App: Profile > Settings > Delete account.
- On the web, without installing the App: solarvis.co/en/legal/market-delete-account.
- By email to privacy@solarvis.co from the address registered to your account.
When you delete your account, we delete or anonymise your profile, contact data, verification documents, preferences, saved cards and push token within 30 days. We keep order, invoice and consent records for the periods in Section 8 where the law requires it; this data is not used for any other purpose. You can also ask us to delete specific data without closing your account by writing to privacy@solarvis.co.
11. Your rights
Depending on where you live, you have the right to:
- learn whether we process your personal data and receive a copy of it;
- know the purposes of processing and the third parties your data is transferred to, in your country or abroad;
- have inaccurate or incomplete data corrected;
- have your data deleted or destroyed, and have that correction or deletion passed on to recipients;
- restrict or object to processing based on legitimate interests, and object to a result against you arising solely from automated analysis;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before the withdrawal;
- claim compensation for damage caused by unlawful processing.
These rights are set out in Article 11 of KVKK for users in Türkiye, in the GDPR and UK GDPR for users in the EEA and the United Kingdom, and in POPIA for users in South Africa.
To exercise them, write to privacy@solarvis.co from your registered email address. Users in Türkiye can also apply through kvkk@solarvis.co, our registered electronic mail (KEP) address electravis@hs01.kep.tr, or by signed letter to the postal address in Section 2. We answer free of charge within 30 days.
If you are not satisfied with our answer, you can complain to your data protection authority: the Personal Data Protection Authority (KVKK) in Türkiye, your local supervisory authority in the EEA, the ICO in the United Kingdom, or the Information Regulator in South Africa.
12. Marketing messages and notifications
We send commercial emails, SMS, calls and promotional push notifications only if you have given permission. You can withdraw it at any time through the unsubscribe link in each message, the notification settings in the App or on your device, the Turkish Message Management System (İYS), or by writing to us. Service messages about your orders and account are not marketing and are sent as long as your account is active.
13. Children
SolarVis Market is a business service for users aged 18 and over acting for a company. It is not directed at children and we do not knowingly collect their data. If you believe a child has given us personal data, contact privacy@solarvis.co and we will delete it.
14. Changes to this Policy
We may update this Policy when the App or the law changes. The current version and its effective date are always published at this address. If a change materially affects how we use your data, we will tell you in the App or by email before it takes effect.
15. Contact
ELECTRAVIS TEKNOLOJİ ANONİM ŞİRKETİ
Üniversiteler Mah. İhsan Doğramacı Bul. No: 27 İç Kapı No: B16, Çankaya, Ankara, Türkiye
Email: privacy@solarvis.co, kvkk@solarvis.co