GDPR Notice & Data Processing Addendum (DPA)
GDPR rights and processing terms for users located in the EU.
Effective date: 2026-06-25 · Operator: Desk Fabrika
Roles
For your own business data you are the controller and [Yasal Unvan — süper admin paneli > Uyumluluk’tan doldurun] is the processor. For account/usage data, [Yasal Unvan — süper admin paneli > Uyumluluk’tan doldurun] is the controller.
Processing Instructions
We process personal data only to provide the service and according to your instructions. We do not process beyond instructions.
Sub-processors
We work with sub-processors for hosting, email delivery, payment and optional analytics; all are bound by appropriate data-protection obligations.
International Transfers
Where transfers outside the EU are required, Standard Contractual Clauses (SCC) and additional safeguards apply.
Data Subject Rights
We support you in fulfilling access, rectification, erasure, restriction, portability and objection requests.
Breach Notification
If a personal data breach is detected, we will notify the relevant parties within the period required by applicable law (generally 72 hours under GDPR Art. 33).
Deletion and Return
On termination of the contract, upon your request we delete or return personal data (legal retention exceptions reserved).