Privacy Policy

1. Scope and responsibility

This policy explains how personal data is processed on the Okurmatik and Trabzon Okurmatik websites and in the meter reading, subscription, billing and field management services provided by TNR BİLGİ TEKNOLOJİLERİ İNŞ. SAN. TİC. LTD. ŞTİ.

TNR is the data controller for contact and quotation processes on its own website. For subscription processes carried out on behalf of a municipality, water authority or another organization, that organization may act as the data controller and TNR as the data processor, depending on the scope of the service. Please also refer to your organization's privacy notice for the specific service.

This general privacy policy does not replace privacy notices for specific processing activities or explicit consent where required. Visiting the website or using the service does not, by itself, constitute explicit consent.

2. Data collected and collection methods

• Identity and contact details: first name, surname, username, phone number and email address; Turkish identity number and address where needed for subscription and billing processes.
• Meter and consumption data: device and meter numbers, device IMEI, installation address, meter photographs, reading dates, readings obtained through optical character recognition (OCR), and consumption records.
• Service and transaction data: subscription applications, invoices, payment status, fault reports, staff assignments, field reports and support correspondence.
• Organizational inquiries: organization name, city, contact details of the authorized representative, estimated subscriber count and your message.
• Technical usage data: IP address, browser information, access time, request and error logs, and cookies for sessions, security and language preferences.

Data is collected electronically through the forms you complete, records entered by authorized users, meter devices and their service providers, your organization's integrations, and the technical operation of the website. The types of data processed depend on the service you use.

3. Purposes and legal grounds

• Managing accounts and subscriptions, reading meters, calculating consumption, and responding to quotation and support requests: necessity for entering into or performing a contract (Article 5/2-c of the Turkish Personal Data Protection Law, KVKK).
• Issuing invoices, keeping accounting records and responding to competent authorities: processing expressly provided for by law and compliance with legal obligations (KVKK Article 5/2-a and ç).
• Service security, troubleshooting and prevention of misuse: legitimate interests, provided your fundamental rights are not harmed; for dispute records, establishing, exercising or protecting a right (KVKK Article 5/2-f and e).

Notifications about invoices, applications and service status may be sent by SMS or email as part of an enabled service. Your consent will be requested separately for any other processing activity that requires explicit consent; you may withdraw that consent.

4. Sharing and transferring data

Authorized staff and the organization providing your service may access data within the scope of their duties. Depending on the enabled service, necessary information may be shared with meter service providers, hosting and technical support providers, Mysoft for electronic invoicing and e-Archive, İleti Merkezi for SMS, and email service providers. Information may be disclosed to competent public authorities and courts where legally required.

Sharing is limited to the data needed for the relevant service or legal obligation. If data is transferred to a provider abroad, the applicable transfer conditions and required safeguards under KVKK Article 9 must be met.

5. Cookies and external resources

Cookies are used to maintain your session, protect forms against forged requests and remember your language preference. You can delete or block cookies in your browser settings; doing so may prevent login and forms from working.

The website connects to external resources such as Google Fonts, jsDelivr and Tailwind CDN for page styling and fonts. These connections may transmit your IP address and technical information sent by your browser to the relevant provider; the providers' own privacy terms also apply.

6. Retention and deletion

Personal data is retained for as long as necessary for the processing purpose and for applicable statutory retention periods. Retention takes account of the ongoing subscription, accounting and invoicing obligations, periods relevant to disputes, and security needs. When the grounds for processing no longer apply, data is deleted, destroyed or anonymized in accordance with the law. Closing an account does not require immediate deletion of records that must legally be retained.

7. Data security

Account authentication, permission-based access and transaction controls are used to help prevent unauthorized use of data. Absolute security cannot be guaranteed for transmission over the internet or electronic storage. Do not share your password or private invoice links with others; contact us if you notice anything suspicious.

8. Your personal data rights

Under KVKK Article 11, subject to the applicable conditions, you may:

• Find out whether your data is being processed and, if it is, request information about the processing, its purpose and whether the data is used in line with that purpose.
• Learn which third parties receive your data in Türkiye or abroad.
• Request correction of incomplete or inaccurate data, deletion or destruction when the legal conditions are met, and notification of these actions to third parties to whom the data was transferred.
• Object to an adverse outcome resulting solely from automated analysis and seek compensation for damage caused by unlawful processing.

You may send your request in writing to the postal address below or use other application methods provided by law. You may also apply using the email address registered in the system. Depending on the request, information necessary to verify your identity may be required. Requests are answered as soon as possible and within 30 days at the latest; you have the right to complain to the Turkish Personal Data Protection Board when the legal conditions are met.

If another organization manages your subscription data, you may need to direct your request to that data controller; you can contact us to find the appropriate application channel.

9. Changes to this policy

This policy may be updated when our services or the law change. The current text and last updated date are published on this page. Changes requiring additional notice or explicit consent are handled through a separate process.

10. Contact