This Privacy Policy explains how FARMA360 TARIM VE HAYVANCILIK TEKNOLOJİ ANONİM ŞİRKETİ
("Farma360", "Company", "we", "us") collects, processes, stores, and protects your personal data
in connection with the Farma360 mobile application ("Application") and related services ("Services").
Legal Name
FARMA360 TARIM VE HAYVANCILIK TEKNOLOJİ ANONİM ŞİRKETİ
Address
Ayazağa Mah. Kemerburgaz Cad. Vadistanbul Park 7C Blok 7 D/15, Sarıyer / İstanbul, Türkiye
Personal Data: Any information relating to an identified or identifiable natural person (KVKK Art. 3, GDPR Art. 4).
Data Controller: The natural or legal person that determines the purposes and means of the processing of personal data; Farma360 within the scope of this policy.
Data Processor: A natural or legal person that processes personal data on behalf of the data controller.
Data Subject: The natural person whose personal data is processed; i.e., you, the Application user.
Explicit Consent: Freely given, specific, informed, and unambiguous consent relating to a particular subject.
3. Scope
This policy applies to all users of the Farma360 mobile application, including farm owners,
business operators, and end users who access services via a customer tracking code ("Shareholders").
The Application is available on iOS (App Store) and Android (Google Play).
Business name, type, city/district, address, Ministry of Agriculture and Forestry registered business number, capacity details, farm photos
Business registration and editing
Animal Records
Ear tag number, breed, gender, usage type, weight, price, purchase location, weight history, photos and videos
Animal registration and editing
Qurban Sales Information
Sale prices, share details, buyer names and phone numbers, deposit amounts, tracking codes, slaughter and delivery plans, notes
Qurban sales management
Customer Reviews
Satisfaction rating (1–5 stars), review text
Customer tracking page
4.2 Data Collected Automatically
Category
Data
Purpose
Location Data
GPS coordinates (latitude/longitude)
Displaying farm location on the map; providing directions to the farm on the customer tracking page
Authentication Token
Session access token
Secure session management
Cache Data
City/district lists, selected farm ID, campaign viewing status
Improving application performance
4.3 Data Obtained from Third Parties
Farma360 does not directly collect personal data from third-party sources. Your account is created by the Farma360 team following a direct communication.
Shareholder Information Sharing: In the qurban sales process, shareholders who
purchase shares of the same animal can access each other's name and phone number information. This
sharing is carried out for the purpose of enabling coordination among shareholders. By logging in
with your tracking code, you acknowledge that other shareholders may access your information and
that you may access theirs.
Information Displayed on Customer Tracking Page: When you access the service via a
tracking code, the following information related to the sales process may be displayed: the seller's
name, phone number, and profile photo; the farm name, location (city/district), and address; delivery
information (recipient name, delivery date, delivery address). Farm owners acknowledge that this
information will be visible to shareholders through the tracking code.
5. Purposes of Data Processing
Your personal data is processed for the following purposes:
Service Delivery: Providing farm management, animal tracking, qurban sales and delivery management, and customer tracking services.
Account Management: Creating user accounts, identity verification, session management, and password reset operations.
Communication: Service-related notifications, technical support, delivery of SMS verification codes; in the future, in-app notifications via push notifications.
Shareholder Coordination: Enabling communication among shareholders of the same animal.
Location Services: Displaying farm locations on the map and providing directions to the farm on the customer tracking page.
Additional rights for consumers residing in California are set forth in Section 12 of this policy.
7. Data Sharing
Your personal data is not shared with third parties except in the following circumstances:
7.1 Service Providers
Service Provider
Purpose
Data Shared
OpenStreetMap (OSM)
Map display
Approximate location area during map viewing (map tile requests)
External Map Applications (Google Maps, Waze, Yandex Navigator, Yandex Maps, HERE WeGo, OsmAnd, Apple Maps)
Directions to farm
Farm GPS coordinates and farm name (transferred to the map application selected by the user)
Google Fonts
Loading font files
Standard HTTP request data (IP address, browser information)
Apple Push Notification Service / Firebase Cloud Messaging
Notification delivery (planned)
Device notification token
7.2 User-Directed Sharing
WhatsApp: When you choose to notify qurban shareholders, the Application opens WhatsApp with the recipient's phone number and a pre-composed message. This sharing occurs entirely with your confirmation.
Shareholder Information Access: Shareholders of the same animal can view each other's names and phone numbers (see Section 4.3).
7.3 Legal Requirements
Your personal data may be shared with relevant authorities upon court order, prosecutor's request, or lawful request from authorized administrative bodies.
7.4 No Sale or Advertising-Related Sharing
Farma360 does not sell, rent, or trade your personal data to third parties for advertising, marketing, or any other commercial purpose.
8. International Data Transfers
Your personal data is processed on Farma360 servers. Through our service providers
(OpenStreetMap, Google Fonts, external map applications), certain technical data
(IP address, map tile requests, GPS coordinates) may be transferred to servers located outside of Turkey.
Such transfers are carried out in compliance with KVKK Art. 9 and GDPR Art. 46, either to
countries with an adequate level of protection or with appropriate safeguards (Standard
Contractual Clauses, etc.). For detailed information, please contact us.
9. Data Retention Periods
Data Category
Retention Period
Account information (name, email, phone)
For the duration of the active account + 30 days following account deletion request
Farm and animal records
For the duration of the active account + statutory retention period (5 years)
Qurban sales and buyer information
5 years following the relevant sales year (commercial and tax legislation)
Customer reviews
2 years from the end of the relevant sales period
Location data
Stored with the farm record; deleted when the account is deleted
Session tokens
Automatically deleted upon logout or app reinstallation
Cache data
Automatically cleared based on TTL (time-to-live)
Photos/videos
For the duration of the active account; removed from servers upon account deletion
After the statutory retention periods expire, your personal data is deleted, destroyed,
or anonymized.
10. Data Security
The following technical and administrative measures are implemented to protect your personal data:
Technical Measures
All data communication is protected with HTTPS/TLS encryption.
Passwords are stored server-side using cryptographic hash algorithms; they are never stored in plain text.
Authentication tokens are stored on the device in encrypted form (iOS: Keychain, Android: Encrypted SharedPreferences).
Stale session information is automatically cleared upon app reinstallation.
API access is secured with Bearer Token-based authorization.
Expired session tokens are automatically invalidated (401 mechanism).
Administrative Measures
Access to personal data is restricted to authorized personnel only.
Employees are informed about data protection practices.
Data processing procedures are regularly reviewed.
11. Local Storage and Cookies
Farma360 is a mobile application and does not use web cookies. However, the Application
uses the following local storage mechanisms on your device:
Temporary use during media upload; deleted after processing
12. Your Rights
12.1 Rights Under KVKK (Article 11)
Pursuant to Article 11 of the Turkish Personal Data Protection Law No. 6698, you have the following rights:
To learn whether your personal data has been processed,
To request information about the processing of your personal data,
To learn the purpose of the processing of your personal data and whether it is used in accordance with its purpose,
To know the third parties to whom your personal data is transferred domestically or abroad,
To request the rectification of your personal data if it is incomplete or inaccurately processed,
To request the erasure or destruction of your personal data under the conditions set forth in Article 7 of KVKK,
To request that rectification, erasure, or destruction operations be notified to third parties to whom your personal data has been transferred,
To object to the occurrence of a result against you by the analysis of your processed data exclusively through automated systems,
To claim compensation for damages arising from the unlawful processing of your personal data.
12.2 Rights Under GDPR (EU/EEA Users)
Under the General Data Protection Regulation (GDPR), you have the following additional rights:
Right of access (Art. 15): Access your processed personal data and obtain a copy.
Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
Right to erasure / Right to be forgotten (Art. 17): Request deletion of your personal data under certain conditions.
Right to restriction of processing (Art. 18): Request restriction of data processing in certain situations.
Right to data portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21): Object to data processing based on legitimate interest.
Right not to be subject to automated decision-making (Art. 22): Protection from decisions based solely on automated processing that produce legal effects.
Right to lodge a complaint: Lodge a complaint with the competent data protection authority in your country.
12.3 Rights Under CCPA/CPRA (California Residents)
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Categories of personal information collected in the preceding 12 months:
Identifiers (name, email, phone number)
Commercial information (farm records, sales information)
Geolocation data (GPS coordinates)
Audio, electronic, visual information (photos, videos)
Internet or electronic network activity information (session data)
Your rights:
Right to know: Learn what personal information is collected, used, and shared about you.
Right to delete: Request deletion of your collected personal information.
Right to correct: Request correction of inaccurate personal information.
Right to opt-out of sale/sharing: Farma360 does not sell your personal information and does not share it for targeted advertising purposes. Your "Do Not Sell or Share My Personal Information" right is preserved.
Right to non-discrimination: You will not be subject to any discrimination in service quality for exercising your privacy rights.
13. Exercising Your Rights
To exercise your rights listed above, you may contact us through the following methods:
Email: Written request to info@farma360tech.com with information to verify your identity.
Mail: Written request via notarized letter or registered mail to Ayazağa Mah. Kemerburgaz Cad. Vadistanbul Park 7C Blok 7 D/15, Sarıyer / İstanbul, Türkiye.
Your requests will be processed free of charge as soon as possible and within a maximum of
30 days, depending on the nature of the request. If the process requires
additional costs, fees determined by the Turkish Personal Data Protection Board may be charged.
14. Children's Privacy
Farma360 is not intended for individuals under the age of 18. You must be at least 18 years old
to use the Application. If we become aware that we have collected personal data from an individual
under 18, we will take steps to delete such data promptly. If you become aware of such a
situation, please contact us.
15. Notification Services
Farma360 may send you notifications via Apple Push Notification Service (APNs) and/or Firebase
Cloud Messaging (FCM). Your device notification token is processed for the provision of this
service. You can disable notifications at any time through your device settings.
16. Changes to This Policy
This Privacy Policy may be updated from time to time. When significant changes are made, we will
notify you through in-app notifications or our website. Your continued use of the Application
after such changes constitutes acceptance of the updated policy.