Data controller

This policy is issued by ERPA DİJİTAL TEKNOLOJİLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ, which provides Jonza (https://jonza.app), as data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR"). It also serves as the privacy notice required by Article 10 of the KVKK.

  • Company: ERPA DİJİTAL TEKNOLOJİLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ
  • Address: Halkalı Merkez Mah. Basın Ekspres Cad. Yıldızlar Oto Mitsubishi Sitesi No: 25/1A İç Kapı No: 4, Küçükçekmece, İstanbul, Türkiye
  • Trade registry: Istanbul Trade Registry, no. 139507-5
  • Phone: +90 (212) 293 58 26
  • Email: info@jonza.app

The personal data we process

What we process depends on how you use Jonza:

  • When you visit the site: your browser and device details, the page you visit and when (server logs), and your language preference.
  • If you have an account: your name, email address, the company you belong to, your roles in the account, your sign-in credentials, the verification key and backup codes if you turn on two-step verification, your session records (browser details, when each session started and was last used) and where you are in the dashboard's guided tours.
  • Content you add to your account: the images, videos and files you upload, and your playlists, schedules, screen names and tags.
  • From the Jonza app on your screens: the device's IP address, network type, Wi-Fi signal strength, free storage and memory, app version, uptime, device clock and what is playing.
  • When you report a problem from the dashboard: your message, name, email address and company, the page you sent it from, and your language and browser details.
  • When you email us: our correspondence and the contact details you share in it.

We use no analytics, advertising or behavioural tracking tools on the site. We do not sell your data or share it with anyone for advertising.

The content you upload may contain other people's personal data (a photo of a member of staff, for example). We process that content only on your behalf and on your instructions; for that data, you are the controller.

Purposes and legal bases

  • Creating your account, providing Jonza and delivering your content to your screens: performance of a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
  • Protecting your account and the service: managing sessions, two-step verification, blocking automated (bot) sign-ins and preventing abuse: our legitimate interests (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
  • Answering support requests and problem reports, and improving the service: performance of a contract and our legitimate interests (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)).
  • Answering sales and information requests: steps prior to entering into a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
  • Meeting our legal obligations and lawful requests from the authorities: legal obligation (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).

We collect this data automatically through the site, the dashboard and the Jonza app on your screens, and through the forms you fill in and the emails you send us.

Who we share data with

To provide the service, we share data with the following providers, and only as far as needed:

  • Cloudflare, Inc.: hosting the site and the dashboard, content delivery, security, Turnstile bot verification and storing the media files you upload.
  • Server providers: hosting the servers that hold account, device and playback data.
  • Google LLC: passing the problem reports sent from the dashboard to our team, using Google services.
  • OpenStreetMap Foundation (Nominatim) and the Norwegian Meteorological Institute (MET Norway): turning the place name entered in a weather widget into a location, and getting that location's weather. Only the place name and coordinates are sent, never your account details.
  • Public authorities: only where the law requires it.

These providers also operate servers outside Turkey and the EU, so these may be international transfers. They are made under Article 9 of the KVKK and Chapter V of the GDPR.

How long we keep it

We keep your account data and content for as long as your account is open. Once it is closed, the data is deleted, destroyed or anonymised after the retention periods required by law have passed.

Server logs and session records are kept for as long as they are needed for security. How long each cookie lasts is set out in the Cookie Policy.

Keeping your data safe

The site and the dashboard run only over an encrypted connection (HTTPS). Sign-in cookies can't be read by scripts in the browser. You can turn on two-step verification, and in your account settings you can see your open sessions and sign out of all of them at once.

Only authorised Erpa Teknoloji staff can access your account, for support and maintenance, and only as far as needed.

Jonza is not directed at anyone under 18.

Your rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of the processing and whether the data is used for that purpose; to know the third parties in Turkey or abroad to whom it is transferred; to have it corrected if it is incomplete or inaccurate, and erased or destroyed under the conditions of Article 7; to have those corrections and erasures notified to the third parties it was transferred to; to object to an outcome against you that arises solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

If the GDPR applies to you, you also have the right of access, rectification and erasure, the right to restrict processing, the right to data portability and the right to object to processing based on legitimate interests.

If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Authority (KVKK) or, if the GDPR applies to you, to the data protection authority where you live.

How to make a request

To exercise your rights, email info@jonza.app from the address registered with us, or write to us at Halkalı Merkez Mah. Basın Ekspres Cad. Yıldızlar Oto Mitsubishi Sitesi No: 25/1A İç Kapı No: 4, Küçükçekmece, İstanbul, Türkiye. Include enough information for us to confirm your identity and a clear description of your request.

We answer free of charge within 30 days at the latest, depending on the nature of the request. If the request involves a separate cost, a fee may be charged under the tariff set by the KVKK Board.

Data sources

Weather shown on screens comes from the Norwegian Meteorological Institute (MET Norway), used under CC BY 4.0.

Place search uses OpenStreetMap data: © OpenStreetMap contributors, under the ODbL (openstreetmap.org/copyright).

Changes

We may update this policy when the service or the law changes. The current version is always on this page, with the date it was last updated at the top.