MME Platform Verified Policy Document
Creation Method: Automatically generated by Markatim AI in accordance with current regulations.
Company Status: Identity verified & approved company (Markatim Bilişim & Ticaret Ltd. Şti.).
Data Controller Authority: Strictly restricted to the company owner via joint e-signature authorization.
Security Standard: 100% Open Source Software with military-grade cryptographic logs.

GDPR Privacy Policy

Data Controller: Markatim Bilişim ("marka.email")

This Privacy Policy describes how we collect, use, and process your personal data in accordance with the General Data Protection Regulation (GDPR). This service has been built on 100% Open Source Software in Istanbul with ❤️.

1. Data We Collect & Access Control Rules

We process standard access logs (IP addresses, user agents, time stamps) and authentication metadata via Keycloak OIDC when you access our Roundcube webmail clients. We do not store or inspect the contents of your e-mails unless explicitly required by law.

Role-Based Access Control (RBAC): In alignment with privacy by design, full access to administrative panels, service segment logs, and data policies is strictly limited to Legislators (Auditors/Regulators), Owners, and E-Signature Authorized Officers. Access is denied for all other user roles.

2. GDPR/KVKK Compliant Logging

All authentication events, connection timestamps, and system administration activities are processed via secure GDPR-compliant, integrity-validated logging protocols to satisfy legal retention obligations and prevent any unauthorized modifications.

3. Legal Basis for Processing

We process your data under GDPR Article 6(1)(b) (performance of contract) to deliver secure e-mail services and Article 6(1)(f) (legitimate interest) to protect our networks from abuse and phishing attempts.

4. Data Retention and Security

All data is hosted securely in datacenters located in Turkey. Access logs are kept for a maximum of 365 days and then permanently deleted. We enforce 2FA (Multi-Factor Authentication) and strict TLS configurations to prevent unauthorized data access.

5. Your Rights

Under GDPR, European citizens have the right to access, rectify, or erase their personal data, restrict processing, and lodge a complaint with a supervisory authority. For queries, contact us at info@marka.email.