Updated 30 December, 2021

<aside> 💡 Appack takes data privacy seriously. This privacy policy explains who we are, how we collect, share and use Personal Information, and how you can exercise your privacy rights.

</aside>

This Privacy Policy (“Privacy Policy”) applies to the processing of personal data of users (“user” or “you”) by Appack Teknoloji Sanayi ve Ticaret Limited Şirketi. (“we” or “us”), the parent company of Nap, when you use the Nap mobile application (“app”) or otherwise interact with us and this Privacy Policy is presented to you, in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”), the Italian Legislative Decree 196/2003 (as amended), and other applicable local laws, as amended or replaced (jointly, “Applicable Privacy Laws”).

1. Data Controller and Data Protection Officer

The Data Controller is Appack Ltd Sti., based in Dumlupınar Mh, Aydın Cd, No:42/A, 41250, Derince, Kocaeli, (Turkey) VAT 0710875605. For any requests regarding the processing of your personal data, please email us at [email protected]

Our Data Protection Officer can be contacted by sending an email to [email protected] for any requests relating to the processing of your personal data or this Privacy Policy.

2. Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing

We process the following categories of personal data, for the purposes and on the legal bases indicated below. Please note that not all of the below information may be deemed personal data in your jurisdiction in all cases.

Purposes & Details

3. Data Storage and Protection

Personal data may be processed by both automated and non-automated means and may be stored at our premises and on our service providers’ servers. We adopt technical and organizational measures designed to prevent the loss, improper use and alteration of your personal data. In some cases, we may also adopt data encryption and pseudonymization measures. However, transmissions over the Internet are never 100% secure, and you should not provide any personal data if you want to avoid any risk.

Personal data processed for the purposes referred to in Section 2.a), 2.d), 2.e), 2.f) and 2.i) will be kept for a period not exceeding the one necessary for the said purposes and, in each case, for no more than 10 (ten) years from the termination of the agreement.

Personal data processed for the purposes referred to in Section 2.b), 2.c), 2.g) and 2.h) will be kept for no more than 2 (two) years from the termination of the agreement.