Privacy Notice (KVKK)

This notice has been prepared under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") to inform you about the personal data processed when you use the Courino courier automation service (the "Service").

Personal data processed

• Identity and contact: full name, username, email, mobile phone, address.
• Shipment and delivery: pickup and delivery addresses, recipient name, the name and signature of the person receiving the delivery, delivery photos, delivery time.
• Courier location: location points sent by the courier app while the courier is on shift (only during the shift; deleted automatically after the period set by the company).
• Transaction security: sign-in records, IP address, device notification token, transaction history.
• Contact verification: the time the mobile phone and email were verified, a digest of the one-time verification code sent (the code itself is not stored), the number of attempts and the IP address of the request.
• Finance: collection and payment records, invoice details (card details are not kept by Courino; they are processed by the payment institution).

Purposes and legal grounds

• Establishing and performing the service contract: opening accounts, handling orders and deliveries, proof of delivery (KVKK art. 5/2-c).
• Legal obligations: invoicing, keeping tax and commercial records (art. 5/2-ç).
• Legitimate interest: service security, preventing misuse, ensuring a mobile phone is active with only one courier company at a time (art. 5/2-f).
• Account security and preventing fake accounts: mobile phones on manager, staff and courier accounts are verified with a 6-digit code sent by SMS, emails with a code sent by email; a phone number or email can belong to only one firm (art. 5/2-c and 5/2-f). The code is valid for 10 minutes and the number of sends and attempts is limited to prevent misuse; when a number is registered at another firm, this is stated without revealing the name of that firm. Verification messages are not marketing and do not require consent for commercial electronic messages.
• Where you have given explicit consent: sending commercial electronic messages (campaigns).

Transfers

Data may be transferred, to the extent necessary to provide the Service, to hosting, email (e.g. SendGrid), SMS and notification (e.g. Firebase) service providers, payment institutions and e-invoice integrators, and to authorised public authorities where required by law. Transfers to providers located abroad are made in accordance with article 9 of the KVKK.

Retention period

Data is kept for as long as the purpose of processing requires and for the retention periods set out in the relevant legislation; at the end of that period it is deleted, destroyed or anonymised. Courier location data is deleted automatically at the end of the period set by the company (90 days by default). Verification codes are kept only as a digest (hash) and expire after 10 minutes; the verification time is kept for the life of the account.

Cookies

Courino uses only strictly necessary cookies and browser storage (security, session and choices you make); it uses no analytics, advertising or marketing cookies. Details and how to change your choices: Cookie Policy.

Your rights

Under article 11 of the KVKK you have the right to learn whether your data is processed, to request information, to request correction or deletion, to know the third parties to whom it is transferred, to object to the result of automated analysis and to claim compensation if you suffer damage.

If you are a customer, courier or shipment recipient of a courier company, please send your request first to the relevant courier company. For requests about your Courino account: destek@courino.com