This page is published under Article 5 of Annex 2 (Personal Data Processing Annex) to the Subscription and Services Agreement. Faprika processes personal data of your store's customers on your behalf as a data processor; a sub-processor is a service provider to which Faprika entrusts part of this work. Faprika imposes on sub-processors obligations at the same level as those in Annex 2.
Types of service
Faprika uses sub-processors for the following services.
| Service | Purpose | Location |
|---|---|---|
| Hosting and cloud | Servers, database and backups on which the store and the Panel run | Turkey for customers established in Turkey; the United Kingdom and Germany for customers established outside Turkey |
| Security and performance network (CDN) | Serving pages from the point closest to the visitor and filtering attacks; data passes temporarily through this network's servers | Countries in the provider's network |
| E-mail delivery | Order, shipping, account and notification e-mails | Stated in the provider list |
| SMS delivery | Order, verification and notification text messages | Stated in the provider list |
| Support software | Support requests and live support conversations | Stated in the provider list |
| Error monitoring | Recording and fixing software errors | Stated in the provider list |
| Artificial intelligence | Processing the data needed for artificial intelligence features; providers do not use personal data to train their general models | Stated in the provider list |
Providers
The providers' names, the countries where they are located and the data they process will be published in this section. When the list is published, the page's version number and update date will change.
Notice of changes
A new sub-processor is notified at least 15 days in advance in the Panel and to your registered e-mail address. During this period you may object on reasonable grounds based on data protection; if the objection cannot be resolved, you may terminate the Agreement and receive a refund of the fee for the unused period. In urgent situations, such as a provider suddenly discontinuing its service or a security incident, a new sub-processor may be used without waiting for this period; in that case, notice is given without delay and the objection period runs from the notice.
Hosting location and international transfers
Data of customers established in Turkey is hosted in data centres in Turkey; data of customers established outside Turkey is hosted in data centres in the United Kingdom or Germany. Faprika does not change the region where your data is hosted without your written request. If data is transferred outside these regions because of a sub-processor, one of the safeguards under Article 9 of the KVKK (Turkish Personal Data Protection Law) is relied on, and for data subject to the GDPR and UK legislation, standard contractual clauses or a valid adequacy decision.
Contact
You can send questions and objections about sub-processors through a support request in the Panel or to hukuk@inovabil.com.tr.