{"id":336,"date":"2025-06-26T16:36:38","date_gmt":"2025-06-26T13:36:38","guid":{"rendered":"https:\/\/mapsly.com?page_id=336"},"modified":"2026-08-18T13:31:19","modified_gmt":"2026-08-18T10:31:19","slug":"dpa","status":"publish","type":"page","link":"https:\/\/mapsly.com\/tr\/dpa\/","title":{"rendered":"MAPSLY VER\u0130 \u0130\u015eLEME EK\u0130"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Veri \u0130\u015fleme Ek S\u00f6zle\u015fmesi<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Last updated: July 31, 2026. This version supersedes the version last updated September 15, 2023.<\/i><\/p>

Bu Veri \u0130\u015fleme Ek S\u00f6zle\u015fmesi (\u201cDPA\u201d), sizinle temsil etti\u011finiz kurulu\u015f (\u201cM\u00fc\u015fteri\u201d, \u201csiz\u201d veya \u201csizin\u201d) ile Mapsly LLC (\u201cMAPSLY\u201d) aras\u0131nda bir anla\u015fmad\u0131r. Bu DPA, MAPSLY Hizmet \u015eartlar\u0131n\u0131 tamamlar ve adresinde mevcuttur, https:\/\/mapsly.com\/terms<\/a>, as updated from time to time between Customer and MAPSLY, or other agreements between Customer and MAPSLY that govern Customer\u2019s use of the MAPSLY Services (the \u201cAgreement\u201d). \u201cCustomer\u201d refers to the entity defined as \u201cUser\u201d under the MAPSLY Terms of Service. This DPA applies to the extent MAPSLY processes Customer Data on Customer\u2019s behalf in providing the Services.<\/p>

Tan\u0131mlar. Bu DPA\u2019da kullan\u0131lan t\u00fcm b\u00fcy\u00fck harfli terimler, aksi S\u00f6zle\u015fme\u2019de tan\u0131mlanmad\u0131k\u00e7a a\u015fa\u011f\u0131da verilen anlamlara sahip olacakt\u0131r:<\/p>

\u201cAPI\u201d<\/span><\/b> bir uygulama programlama arabirimi anlam\u0131na gelir.<\/p>

\u201cApplicable Data Protection Law\u201d<\/span><\/b> means all laws and regulations applicable to and binding on the processing of Customer Data by a party, including, as applicable, the GDPR, the UK GDPR and the UK Data Protection Act 2018, the Swiss Federal Act on Data Protection (\u201cFADP\u201d), and applicable United States federal and state privacy laws (including the California Consumer Privacy Act, as amended).<\/p>

\u201cBinding Corporate Rules\u201d<\/span><\/b> GDPR'de verilen anlam\u0131 ta\u015f\u0131r.<\/p>

\u201cController\u201d<\/span><\/b> GDPR'de verilen anlam\u0131 ta\u015f\u0131r.<\/p>

\u201cController-to-Processor Clauses\u201d<\/span><\/b> 4 Haziran 2021 tarihli ve Avrupa Komisyonu Uygulama Karar\u0131 (AB) 2021\/914 say\u0131l\u0131 standart s\u00f6zle\u015fme h\u00fck\u00fcmleri anlam\u0131na gelir ve Veri Aktar\u0131mlar\u0131 i\u00e7in Denetleyiciler ve \u0130\u015flemciler aras\u0131nda onaylanm\u0131\u015ft\u0131r.<\/p>

\u201cCustomer Data\u201d<\/span><\/b> means the Personal Data that is uploaded to or generated within the Services under Customer\u2019s MAPSLY accounts, excluding the End-User account and usage information described in Section 1.5.<\/p>

\u201cData Privacy Framework\u201d or \u201cDPF\u201d<\/span><\/b> means, together, the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as administered by the U.S. Department of Commerce.<\/p>

\u201cDocumentation\u201d<\/span><\/b> Hizmetler i\u00e7in o zamanki g\u00fcncel belge anlam\u0131na gelir ve konumu https:\/\/help.mapsly.com<\/a> (ve MAPSLY taraf\u0131ndan belirlenen t\u00fcm sonraki konumlar).<\/p>

\u201cEEA\u201d<\/span><\/b> Avrupa Ekonomik Alan\u0131 anlam\u0131na gelir.<\/p>

\u201cEnd Users\u201d<\/span><\/b> M\u00fc\u015fteri\u2019nin Mapsly hesab\u0131n\u0131n kullan\u0131c\u0131lar\u0131 olup, M\u00fc\u015fteri taraf\u0131ndan Mapsly\u2019yi kullanmak \u00fczere atanm\u0131\u015f M\u00fc\u015fteri\u2019nin \u00e7al\u0131\u015fanlar\u0131 ve y\u00fcklenicilerini de kapsar.<\/p>

\u201cGDPR\u201d<\/span><\/b> 27 Nisan 2016 tarihli Avrupa Parlamentosu ve Konseyi\u2019nin 2016\/679 say\u0131l\u0131 d\u00fczenlemesi olup, ki\u015fisel verilerin i\u015flenmesi konusunda ger\u00e7ek ki\u015filerin korunmas\u0131 ve bu verilerin serbest dola\u015f\u0131m\u0131 ile ilgili olup, 95\/46\/EC say\u0131l\u0131 Direktifin y\u00fcr\u00fcrl\u00fckten kald\u0131r\u0131lmas\u0131n\u0131 sa\u011flar (Genel Veri Koruma Y\u00f6netmeli\u011fi).<\/p>

\u201cMAPSLY Network\u201d<\/span><\/b> MAPSLY\u2019nin kontrol\u00fcnde olan ve Hizmetleri sa\u011flamak i\u00e7in kullan\u0131lan sunucular, a\u011f donan\u0131mlar\u0131 ve ana yaz\u0131l\u0131m sistemleri (\u00f6rne\u011fin, sanal g\u00fcvenlik duvarlar\u0131) anlam\u0131na gelir.<\/p>

\u201cMAPSLY Setup console\u201d<\/span><\/b> ana men\u00fcdeki \u201cKurulum\u201d alt\u0131nda bulunan Mapsly Servisi i\u00e7indeki Kurulum b\u00f6l\u00fcm\u00fcn\u00fc ifade eder.<\/p>

\u201cPersonal Data\u201d<\/span><\/b> Ge\u00e7erli Veri Koruma Yasas\u0131'nda tan\u0131mland\u0131\u011f\u0131 \u015fekilde ki\u015fisel veri, ki\u015fisel bilgi, kimli\u011fi belirlenebilir bilgi veya di\u011fer e\u015fde\u011fer terimler anlam\u0131na gelir.<\/p>

\u201cProcessing\u201d<\/span><\/b> GDPR\u2019de verilen anlam\u0131 ta\u015f\u0131r ve \u201ci\u015flemek\u201d, \u201ci\u015flemler\u201d ve \u201ci\u015flenmi\u015f\u201d terimleri buna g\u00f6re yorumlanacakt\u0131r.<\/p>

\u201cProcessor\u201d<\/span><\/b> GDPR'de verilen anlam\u0131 ta\u015f\u0131r.<\/p>

\u0130\u015flemciden \u0130\u015flemciye H\u00fck\u00fcmler<\/span><\/b> means the standard contractual clauses between Processors for Data Transfers, as approved by the European Commission Implementing Decision (EU) 2021\/914 of 4 June 2021.<\/p>

G\u00fcvenlik Olay\u0131<\/span><\/b> MAPSLY\u2019nin g\u00fcvenli\u011finin, M\u00fc\u015fteri Verilerinin kazara veya yasa d\u0131\u015f\u0131 tahribi, kayb\u0131, de\u011fi\u015ftirilmesi, yetkisiz if\u015fas\u0131 veya eri\u015fimi ile sonu\u00e7lanan ihlali anlam\u0131na gelir.<\/p>

Hizmet Kontrolleri<\/span><\/b> Hizmetlerin sa\u011flad\u0131\u011f\u0131, G\u00fcvenlik \u00f6zellikleri ve i\u015flevler dahil olmak \u00fczere kontrolleri ifade eder ve bu, Belgelerde a\u00e7\u0131klanm\u0131\u015ft\u0131r.<\/p>

\u201cStandard Contractual Clauses\u201d<\/span><\/b> means (i) the Controller-to-Processor Clauses, or (ii) the Processor-to-Processor Clauses, as applicable in accordance with Sections 9.2.1 and 9.2.2, as supplemented, where applicable, by the UK Addendum (for Data Transfers subject to the UK GDPR) and by the Swiss adaptations described in Section 9.2.4 (for Data Transfers subject to the FADP).<\/p>

\u00dc\u00e7\u00fcnc\u00fc \u00fclke<\/span><\/b> means a country outside the EEA, the United Kingdom, or Switzerland not recognized by the European Commission (or, as applicable, by the competent United Kingdom or Swiss authorities) as providing an adequate level of protection for personal data (as described in the GDPR, the UK GDPR, or the FADP, as applicable).<\/p>

\u201cUK Addendum\u201d<\/span><\/b> means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses issued by the UK Information Commissioner, in force 21 March 2022.<\/p>

\u201cUK GDPR\u201d<\/span><\/b> means the GDPR as it forms part of the law of the United Kingdom by virtue of section 3 of the European Union (Withdrawal) Act 2018.<\/p>

1. Data Processing<\/h2>

1.1 Scope and Roles.<\/span><\/b> Bu DPA, MAPSLY m\u00fc\u015fteri verilerini i\u015fledi\u011finde ge\u00e7erlidir. Bu ba\u011flamda, MAPSLY m\u00fc\u015fteri i\u00e7in Veri \u0130\u015fleyici olarak hareket edecek, m\u00fc\u015fteri ise M\u00fc\u015fteri Verilerinin Veri Sorumlusu veya Veri \u0130\u015fleyicisi olarak hareket edebilir.<\/p>

1.2 Customer Controls.<\/span><\/b> M\u00fc\u015fteri, Uygulanabilir Veri Koruma Yasas\u0131 kapsam\u0131ndaki y\u00fck\u00fcml\u00fcl\u00fcklerini yerine getirmesine yard\u0131mc\u0131 olmak i\u00e7in Hizmet Kontrollerini kullanabilir; bu, veri sahiplerinin taleplerine yan\u0131t verme y\u00fck\u00fcml\u00fcl\u00fcklerini de i\u00e7erir. \u0130\u015flemenin niteli\u011fi g\u00f6z \u00f6n\u00fcne al\u0131nd\u0131\u011f\u0131nda, M\u00fc\u015fteri, MAPSLY'nin Standart S\u00f6zle\u015fme Maddeleri kapsam\u0131nda aktar\u0131lan M\u00fc\u015fteri Verilerinin yanl\u0131\u015f veya g\u00fcncel olmad\u0131\u011f\u0131n\u0131 \u00f6\u011frenmesinin muhtemel olmad\u0131\u011f\u0131n\u0131 kabul eder. Yine de, e\u011fer MAPSLY, Standart S\u00f6zle\u015fme Maddeleri kapsam\u0131nda aktar\u0131lan M\u00fc\u015fteri Verilerinin yanl\u0131\u015f veya g\u00fcncel olmad\u0131\u011f\u0131n\u0131 \u00f6\u011frenirse, M\u00fc\u015fteriyi gecikmeksizin bilgilendirecektir. MAPSLY, M\u00fc\u015fterinin M\u00fc\u015fteri Verilerini silmek veya d\u00fczeltmek i\u00e7in kullanabilece\u011fi Hizmet Kontrollerini sa\u011flayarak, Standart S\u00f6zle\u015fme Maddeleri kapsam\u0131nda aktar\u0131lan yanl\u0131\u015f veya g\u00fcncel olmayan M\u00fc\u015fteri Verilerinin silinmesi veya d\u00fczeltilmesi i\u00e7in M\u00fc\u015fteri ile i\u015fbirli\u011fi yapacakt\u0131r.<\/p>

1.3 Details of Data Processing.<\/span><\/b><\/p>

1.3.1 Subject matter.<\/span><\/b> Bu DPA kapsam\u0131nda veri i\u015fleme konusu M\u00fc\u015fteri Verileridir.<\/p>

1.3.2 Duration.<\/span><\/b> The processing continues for the Term of the Agreement and thereafter for the limited period necessary to return, delete, or lawfully retain Customer Data in accordance with Section 11.<\/p>

1.3.3 Purpose.<\/span><\/b> Bu DPA kapsam\u0131ndaki veri i\u015flemenin amac\u0131, M\u00fc\u015fteri taraf\u0131ndan zaman zaman ba\u015flat\u0131lan Hizmetlerin sa\u011flanmas\u0131d\u0131r.<\/p>

1.3.4 Nature of the processing.<\/span><\/b> Compute, storage, geocoding, routing, synchronization with Customer\u2019s connected systems, and such other Services as described in the Documentation and initiated by Customer from time to time, including, where Customer uses AI-based features of the Services, processing by AI model providers engaged as Sub-processors solely to provide the Services to Customer. MAPSLY does not use Customer Data to train generalized artificial intelligence or machine learning models.<\/p>

1.3.5 Type of Customer Data.<\/span><\/b> Customer Data uploaded to or generated within the Services under Customer\u2019s MAPSLY accounts, which may include contact and CRM records, addresses and other location data (including precise geolocation of End Users where Customer enables location tracking, check-in, or similar features), photos, notes, form responses, audio recordings and transcripts (where Customer uses voice or AI-based features), and automation and activity data.<\/p>

1.3.6 Categories of data subjects.<\/span><\/b> The data subjects could include Customer\u2019s customers, prospects and leads, employees, suppliers and End Users.<\/p>

1.4 Compliance with Laws.<\/span><\/b> Her taraf, bu DPA'n\u0131n yerine getirilmesinde kendisine uygulanabilir ve ba\u011flay\u0131c\u0131 olan t\u00fcm yasa, kural ve d\u00fczenlemelere, ge\u00e7erli Veri Koruma Kanunu da dahil olmak \u00fczere, uyacakt\u0131r.<\/p>

1.5 Mapsly as Controller.<\/span><\/b> Customer acknowledges that Mapsly collects certain information about Customer\u2019s End Users \u2014 such as account, authentication, billing, support, and usage information \u2014 as described in the MAPSLY Privacy Policy (currently published at https:\/\/mapsly.com\/privacy-policy<\/a>). To the extent Mapsly determines the purposes and means of processing such information, Mapsly acts as an independent Controller of that information and processes it in accordance with the MAPSLY Privacy Policy and Applicable Data Protection Law; such information is not Customer Data processed under this DPA. Mapsly may disclose such information internally and to its service providers for legitimate business purposes relating to the operation, support, and improvement of the Services, such as billing, account management, technical support, and product development.<\/p>

2. Customer Instructions<\/h2>

The parties agree that this DPA and the Agreement (including Customer providing instructions via configuration tools such as the MAPSLY Setup console and APIs made available by MAPSLY for the Services) constitute Customer\u2019s documented instructions regarding MAPSLY\u2019s processing of Customer Data (\u201cDocumented Instructions\u201d). MAPSLY will process Customer Data only in accordance with Documented Instructions (which if Customer is acting as a Processor, could be based on the instructions of its Controllers). Additional instructions outside the scope of the Documented Instructions (if any) require prior written agreement between MAPSLY and Customer, including agreement on any additional fees payable by Customer to MAPSLY for carrying out such instructions. Where an additional instruction is required for Customer\u2019s compliance with Applicable Data Protection Law and the parties are unable, within thirty (30) days, to reasonably agree on its implementation and any applicable fees, Customer may terminate the affected Services by written notice, and MAPSLY will refund Customer the prepaid fees prorated for the unused portion of the then-current Billing Period for the terminated Services. Taking into account the nature of the processing, Customer agrees that it is unlikely MAPSLY can form an opinion on whether Documented Instructions infringe Applicable Data Protection Law. If MAPSLY forms such an opinion, it will immediately inform Customer, in which case, Customer is entitled to withdraw or modify its Documented Instructions.<\/p>

3. Confidentiality of Customer Data<\/h2>

MAPSLY, Hizmetleri s\u00fcrd\u00fcrmek veya sa\u011flamak i\u00e7in gerekti\u011fi durumlar ile yasalara veya resmi kurumlardan gelen ge\u00e7erli ve ba\u011flay\u0131c\u0131 bir talimata (\u00f6rne\u011fin mahkeme emri veya celp) uymak gerekti\u011fi durumlar haricinde, M\u00fc\u015fteri Verilerine eri\u015fmeyecek, kullanmayacak veya \u00fc\u00e7\u00fcnc\u00fc taraflara a\u00e7\u0131klamayacakt\u0131r. Bir resmi kurum MAPSLY\u2019ye M\u00fc\u015fteri Verileri talebinde bulunursa, MAPSLY bu kurumun veriyi do\u011frudan M\u00fc\u015fteri\u2019den talep etmesini sa\u011flamaya \u00e7al\u0131\u015facakt\u0131r. Bu \u00e7er\u00e7evede, MAPSLY resmi kuruma M\u00fc\u015fteri\u2019nin temel ileti\u015fim bilgilerini verebilir. M\u00fc\u015fteri Verilerinin resmi kuruma a\u00e7\u0131klanmas\u0131 zorunlu hale gelirse, MAPSLY, M\u00fc\u015fteri\u2019nin koruma emri veya ba\u015fka uygun hukuki \u00e7\u00f6z\u00fcm arayabilmesi i\u00e7in talebin makul bir bildirimini M\u00fc\u015fteri\u2019ye yapacakt\u0131r; ancak yasal sebeplerle bunu yapmas\u0131 yasaklanm\u0131\u015fsa, bu kay\u0131t d\u0131\u015f\u0131d\u0131r.<\/p>

4. Confidentiality Obligations of MAPSLY Personnel<\/h2>

MAPSLY, personelinin MAPSLY taraf\u0131ndan yetkilendirilmedik\u00e7e M\u00fc\u015fteri Verilerini i\u015flemesini k\u0131s\u0131tlar. MAPSLY, personeline gizlilik, veri koruma ve veri g\u00fcvenli\u011fi ile ilgili uygun s\u00f6zle\u015fmesel y\u00fck\u00fcml\u00fcl\u00fckler getirir.<\/p>

5. Security of Data Processing<\/h2>

5.1<\/span><\/b> MAPSLY has implemented and will maintain the appropriate technical and organizational measures to ensure the security and confidentiality of the Customer Data, as described in Annex A (Technical and Organizational Measures) to this DPA and in accordance with Mapsly\u2019s security standards described in this DPA and within the MAPSLY Privacy Policy. MAPSLY may update the measures described in Annex A from time to time, provided that no update materially reduces the overall security of the Services.<\/p>

5.2 Customer Responsibilities and Optional Security Features.<\/span><\/b> MAPSLY, M\u00fc\u015fteri Verilerinin g\u00fcvenli\u011fini daha da g\u00fc\u00e7lendirmek i\u00e7in M\u00fc\u015fterinin kullanmay\u0131 tercih edebilece\u011fi bir\u00e7ok Hizmet Kontrol\u00fc sunar. M\u00fc\u015fteri, (a) Hizmetleri g\u00fcvenli bir \u015fekilde kullanmak, buna hesap kimlik do\u011frulama kimlik bilgilerini g\u00fcvence alt\u0131na almak, (b) M\u00fc\u015fteri Verilerinin Hizmetlere gidip gelirken g\u00fcvenli\u011fini korumak, (c) Hizmetlere y\u00fcklenen M\u00fc\u015fteri Verilerini g\u00fcvenli bir \u015fekilde \u015fifrelemek veya yedeklemek i\u00e7in uygun ad\u0131mlar\u0131 atmak, (d) Hizmetleri ve Hizmet Kontrollerini do\u011fru yap\u0131land\u0131rmak ve (e) M\u00fc\u015fteri Verilerinin g\u00fcvenli\u011fi, korunmas\u0131 ve silinmesini sa\u011flamak i\u00e7in M\u00fc\u015fterinin yeterli g\u00f6rd\u00fc\u011f\u00fc di\u011fer ad\u0131mlar\u0131 atmakla sorumludur.<\/p>

5.3 Security Incident Notification.<\/span><\/b><\/p>

5.3.1 Security Incident.<\/span><\/b> MAPSLY, (a) G\u00fcvenlik Olay\u0131n\u0131 \u00f6\u011frendikten sonra m\u00fc\u015fteriye gereksiz gecikme olmaks\u0131z\u0131n bildirecek ve (b) G\u00fcvenlik Olay\u0131n\u0131 ele almak i\u00e7in uygun \u00f6nlemleri alacak, bunlar aras\u0131nda G\u00fcvenlik Olay\u0131ndan kaynaklanan olumsuz etkileri hafifletmeye y\u00f6nelik \u00f6nlemler de bulunmaktad\u0131r.<\/p>

5.3.2 MAPSLY Assistance.<\/span><\/b> M\u00fc\u015fterinin Denetleyici otoritelere veya veri sahiplerine (uygulanabilir oldu\u011funda) G\u00fcvenlik Olay\u0131n\u0131 bildirebilmesini sa\u011flamak i\u00e7in, MAPSLY, i\u015fleme do\u011fas\u0131n\u0131, MAPSLY taraf\u0131ndan sa\u011flanan bilgileri ve gizlilik gibi bilgilerin a\u00e7\u0131klanmas\u0131na y\u00f6nelik herhangi bir k\u0131s\u0131tlamay\u0131 dikkate alarak, MAPSLY'n\u0131n M\u00fc\u015fteriye a\u00e7\u0131klayabilece\u011fi G\u00fcvenlik Olay\u0131 ile ilgili bilgileri bildirime dahil ederek M\u00fc\u015fteri ile i\u015fbirli\u011fi yapacak ve M\u00fc\u015fteriye yard\u0131mc\u0131 olacakt\u0131r. \u0130\u015flemenin do\u011fas\u0131 dikkate al\u0131nd\u0131\u011f\u0131nda, M\u00fc\u015fteri G\u00fcvenlik Olay\u0131n\u0131n muhtemel sonu\u00e7lar\u0131n\u0131 belirlemede en do\u011fru ki\u015fi oldu\u011funu kabul eder.<\/p>

5.3.3 Unsuccessful Security Incidents.<\/span><\/b> M\u00fc\u015fteri kabul eder ki:<\/p>

(i) an unsuccessful Security Incident will not be subject to this Section 5.3. An unsuccessful Security Incident is one that results in no unauthorized access to Customer Data or to any of MAPSLY\u2019s equipment or facilities storing Customer Data, and could include, without limitation, pings and other broadcast attacks on firewalls or edge servers, port scans, unsuccessful log-on attempts, denial of service attacks, packet sniffing (or other unauthorized access to traffic data that does not result in access beyond headers) or similar incidents; and<\/p>

(ii) MAPSLY\u2019s obligation to report or respond to a Security Incident under this Section 5.3 is not and will not be construed as an acknowledgment by MAPSLY of any fault or liability of MAPSLY with respect to the Security Incident.<\/p>

5.3.4 Communication.<\/span><\/b> G\u00fcvenlik Olay\u0131 Bildirimleri, varsa, MAPSLY taraf\u0131ndan se\u00e7ilen her t\u00fcrl\u00fc y\u00f6ntemle, e-posta dahil olmak \u00fczere, M\u00fc\u015fteri\u2019nin bir veya daha fazla y\u00f6neticisine g\u00f6nderilecektir. M\u00fc\u015fteri\u2019nin y\u00f6neticilerinin, MAPSLY Kurulum konsolunda do\u011fru ileti\u015fim bilgilerini s\u00fcrekli olarak g\u00fcncel tutmalar\u0131 ve iletim g\u00fcvenli\u011fini sa\u011flamalar\u0131 tamamen M\u00fc\u015fteri\u2019nin sorumlulu\u011fundad\u0131r.<\/p>

5.3.5 Notification Obligations.<\/span><\/b> MAPSLY, M\u00fc\u015fteriyi bir G\u00fcvenlik Olay\u0131 hakk\u0131nda bilgilendirirse veya M\u00fc\u015fteri, M\u00fc\u015fteri Verilerinin kazara veya yasad\u0131\u015f\u0131 \u015fekilde yok edilmesi, kayb\u0131, de\u011fi\u015fikli\u011fi, yetkisiz if\u015fas\u0131 veya eri\u015fimi hakk\u0131nda fark\u0131ndal\u0131k kazan\u0131rsa, M\u00fc\u015fteri (a) Ge\u00e7erli Veri Koruma Yasas\u0131 kapsam\u0131nda herhangi bir bildirim veya ba\u015fka bir y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fcn olup olmad\u0131\u011f\u0131n\u0131 belirlemekten ve (b) bu y\u00fck\u00fcml\u00fcl\u00fcklere uymak i\u00e7in gerekli i\u015flemleri yapmaktan sorumlu olacakt\u0131r. Bu, MAPSLY'nin bu B\u00f6l\u00fcm 5.3 kapsam\u0131ndaki y\u00fck\u00fcml\u00fcl\u00fcklerini s\u0131n\u0131rlamaz.<\/p>

6. Sub-processing<\/h2>

6.1 Authorized Sub-processors.<\/span><\/b> Customer provides general authorization to MAPSLY\u2019s use of sub-processors to provide processing activities on Customer Data on behalf of Customer (\u201cSub-processors\u201d) in accordance with this Section. The MAPSLY website (currently posted at https:\/\/mapsly.com\/sub-processors\/<\/a>) lists Sub-processors that are currently engaged by MAPSLY. At least 30 days before MAPSLY engages a Sub-processor, MAPSLY will update the applicable website and provide Customer with a mechanism to obtain notice of that update. To object to a Sub-processor, Customer can: (i) cease using the functionality of the MAPSLY Service for which MAPSLY has engaged the Sub-processor, or (ii) terminate the Agreement pursuant to its terms. If Customer objects to a new Sub-processor on reasonable grounds relating to data protection and the parties are unable to resolve the objection within thirty (30) days, Customer may terminate the Agreement with respect to the affected Services by written notice, and MAPSLY will refund Customer the prepaid fees prorated for the unused portion of the then-current Billing Period following the effective date of termination. If the affected functionality cannot reasonably be separated from the remainder of the Services, Customer may terminate the Agreement in its entirety on the same terms.<\/p>

6.2 Sub-processor Obligations.<\/span><\/b> MAPSLY, B\u00f6l\u00fcm 6.1\u2019de a\u00e7\u0131kland\u0131\u011f\u0131 gibi bir Alt i\u015flemciyi yetkilendirdi\u011finde:<\/p>

(i) MAPSLY will restrict the Sub-processor\u2019s access to Customer Data only to what is necessary to provide or maintain the Services in accordance with the Documentation, and MAPSLY will prohibit the Sub-processor from accessing Customer Data for any other purpose;<\/p>

(ii) MAPSLY will enter into a written agreement with the Sub-processor and, to the extent that the Sub-processor performs the same data processing services provided by MAPSLY under this DPA, MAPSLY will impose on the Sub-processor the same contractual obligations that MAPSLY has under this DPA; and<\/p>

(iii) MAPSLY will remain responsible for its compliance with the obligations of this DPA and for any acts or omissions of the Sub-processor that cause MAPSLY to breach any of MAPSLY\u2019s obligations under this DPA.<\/p>

7. MAPSLY Assistance with Data Subject Requests<\/h2>

\u0130\u015flemenin do\u011fas\u0131 g\u00f6z \u00f6n\u00fcnde bulunduruldu\u011funda, Hizmet Kontrolleri, MAPSLY'nin M\u00fc\u015fteri'nin Ge\u00e7erli Veri Koruma Yasas\u0131 uyar\u0131nca veri sahiplerinin taleplerine yan\u0131t verme y\u00fck\u00fcml\u00fcl\u00fcklerini yerine getirmesine yard\u0131mc\u0131 olmak i\u00e7in teknik ve organizasyonel tedbirlerdir. Bir veri sahibi MAPSLY'ye talepte bulunursa, MAPSLY, talebin M\u00fc\u015fteri'nin sorumlu oldu\u011fu bir veri sahibinden geldi\u011fini tespit etti\u011finde, bu talebi derhal M\u00fc\u015fteri'ye iletecektir. M\u00fc\u015fteri, kendi ad\u0131na ve M\u00fc\u015fteri \u0130\u015flemci olarak davrand\u0131\u011f\u0131nda denetleyicileri ad\u0131na, MAPSLY'nin MAPSLY'ye talepte bulunan herhangi bir veri sahibine, talebi M\u00fc\u015fteri'ye iletti\u011fini onaylamak i\u00e7in yan\u0131t vermesine yetki verir. Taraflar, M\u00fc\u015fteri'nin Hizmet Kontrollerini kullanmas\u0131n\u0131n ve MAPSLY'nin bu b\u00f6l\u00fcm uyar\u0131nca veri sahiplerinden gelen talepleri M\u00fc\u015fteri'ye iletmesinin, M\u00fc\u015fteri'nin gerekli yard\u0131mlar\u0131n\u0131n kapsam\u0131n\u0131 ve derecesini temsil etti\u011fini kabul eder.<\/p>

8. Compliance Verification<\/h2>

8.1 MAPSLY Audits.<\/span><\/b> MAPSLY uses external auditors to verify the adequacy of its security measures. This audit: (a) will be performed at least annually; (b) will be performed according to a widely recognized standard (such as SOC 2 Type II); (c) will be performed by independent third-party security professionals at MAPSLY\u2019s selection and expense; and (d) will result in the generation of an audit report (\u201cReport\u201d), which will be MAPSLY\u2019s Confidential Information.<\/p>

8.2 Audit Reports.<\/span><\/b> M\u00fc\u015fterinin yaz\u0131l\u0131 talebi ve taraflar aras\u0131nda ge\u00e7erli bir NDA bulunmas\u0131 halinde, MAPSLY, M\u00fc\u015fteriye bu DPA kapsam\u0131ndaki y\u00fck\u00fcml\u00fcl\u00fcklerine uydu\u011funu makul \u015fekilde do\u011frulayabilmesi i\u00e7in Raporun bir kopyas\u0131n\u0131 sa\u011flayacakt\u0131r.<\/p>

8.3 Privacy Impact Assessment and Prior Consultation.<\/span><\/b> \u0130\u015flemenin niteli\u011fi ve MAPSLY\u2019nin elindeki bilgiler g\u00f6z \u00f6n\u00fcnde bulundurularak, MAPSLY, M\u00fc\u015fteri\u2019nin veri koruma etki de\u011ferlendirmeleri ve \u00f6n dan\u0131\u015fmanl\u0131k konusundaki y\u00fck\u00fcml\u00fcl\u00fcklerini yerine getirmesine bu B\u00f6l\u00fcm 8 kapsam\u0131nda MAPSLY\u2019nin sa\u011flad\u0131\u011f\u0131 bilgileri sunarak yard\u0131mc\u0131 olacakt\u0131r.<\/p>

9. Transfers of Personal Data<\/h2>

9.1 Locations.<\/span><\/b> MAPSLY stores and processes Customer Data within the MAPSLY Network in the USA. MAPSLY personnel and Sub-processors may remotely access Customer Data from other countries in which they operate solely as necessary to provide, maintain, and support the Services; any such access constitutes a Data Transfer governed by this Section 9. MAPSLY will not otherwise transfer Customer Data outside of the EEA, the United Kingdom, Switzerland, and the USA except as necessary to provide the Services initiated by Customer, or as necessary to comply with the law or valid and binding order of a governmental body.<\/p>

9.2 Application of Standard Contractual Clauses.<\/span><\/b> Subject to Section 9.3, the Standard Contractual Clauses will only apply to Customer Data subject to the GDPR, the UK GDPR, or the FADP that is transferred, either directly or via onward transfer, to any Third Country (each a \u201cData Transfer\u201d).<\/p>

9.2.1<\/span><\/b> M\u00fc\u015fteri Kontrol\u00f6r olarak hareket etti\u011finde, Kontrol\u00f6r\u2019den \u0130\u015flemci\u2019ye Maddeler Veri Aktar\u0131m\u0131na uygulanacakt\u0131r.<\/p>

9.2.2<\/span><\/b> M\u00fc\u015fteri, Veri \u0130\u015fleyici olarak hareket etti\u011finde, \u0130\u015fleyici'den \u0130\u015fleyici'ye H\u00fck\u00fcmler bir Veri Aktar\u0131m\u0131na uygulanacakt\u0131r. \u0130\u015flemenin do\u011fas\u0131 dikkate al\u0131narak, M\u00fc\u015fteri, MAPSLY'nin M\u00fc\u015fteri'nin Veri Sorumlular\u0131n\u0131n kimli\u011fini bilmesinin muhtemel olmad\u0131\u011f\u0131n\u0131 kabul eder \u00e7\u00fcnk\u00fc MAPSLY'nin M\u00fc\u015fteri'nin Veri Sorumlular\u0131yla do\u011frudan bir ili\u015fkisi yoktur ve bu nedenle, M\u00fc\u015fteri, \u0130\u015fleyici'den \u0130\u015fleyici'ye H\u00fck\u00fcmler kapsam\u0131nda MAPSLY'nin M\u00fc\u015fteri'nin Veri Sorumlular\u0131na kar\u015f\u0131 y\u00fck\u00fcml\u00fcl\u00fcklerini yerine getirecektir.<\/p>

9.2.3<\/span><\/b> For Data Transfers subject to the UK GDPR, the Standard Contractual Clauses apply as supplemented by the UK Addendum, completed as set forth in Section 9.4.<\/p>

9.2.4<\/span><\/b> For Data Transfers subject to the FADP, the Standard Contractual Clauses apply with the following adaptations: (i) references to the GDPR are to be read as references to the FADP; (ii) the competent supervisory authority is the Swiss Federal Data Protection and Information Commissioner; (iii) the term \u201cMember State\u201d is interpreted to include Switzerland, so that data subjects in Switzerland may enforce their rights in their place of habitual residence; and (iv) references to EU law are to be read as references to Swiss law where the transfer is exclusively subject to the FADP.<\/p>

9.3 Alternative Transfer Mechanism.<\/span><\/b> To the extent MAPSLY has adopted a valid alternative transfer mechanism recognized under Applicable Data Protection Law \u2014 including MAPSLY\u2019s certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework \u2014 such mechanism will apply to a Data Transfer in place of the Standard Contractual Clauses for so long as it remains valid. If such alternative mechanism is invalidated, suspended, withdrawn, or otherwise ceases to provide a lawful basis for a Data Transfer, the Standard Contractual Clauses (as completed in Section 9.4) will automatically apply to that Data Transfer without further action by either party. MAPSLY will maintain its Data Privacy Framework certification for so long as it relies on the Data Privacy Framework for Data Transfers.<\/p>

9.4 Completion of the Standard Contractual Clauses.<\/span><\/b> For each Data Transfer to which the Standard Contractual Clauses apply, the Standard Contractual Clauses are deemed completed as follows: (i) Module Two (transfer controller to processor) applies where Customer acts as a Controller, and Module Three (transfer processor to processor) applies where Customer acts as a Processor; (ii) in Clause 7, the optional docking clause does not apply; (iii) in Clause 9, Option 2 (general written authorisation) applies, and the time period for prior notice of Sub-processor changes is thirty (30) days, in accordance with Section 6.1; (iv) in Clause 11, the optional language does not apply; (v) in Clauses 17 and 18, the governing law and the competent courts are those of Ireland; and (vi) Annex I of the Standard Contractual Clauses is deemed completed with the information set out in Annex B to this DPA, Annex II is deemed completed with Annex A to this DPA, and Annex III is deemed completed with the Sub-processor list referenced in Section 6.1. Where the UK Addendum applies: Table 1 is deemed completed with the parties\u2019 details under the Agreement; Table 2 with the Standard Contractual Clauses as completed above; Table 3 with the Annex information above; and, for Table 4, neither party may end the UK Addendum as set out in Section 19 of the UK Addendum.<\/p>

10. Termination of the DPA<\/h2>

This DPA will continue in force until the termination of the Agreement (the \u201cTermination Date\u201d).<\/p>

11. Deletion of Customer Data<\/h2>

Upon termination or expiration of the Agreement, MAPSLY shall delete Customer Data from its active systems at Customer\u2019s request, and in any event not later than within a 90-day period after termination, except and to the extent MAPSLY is required by applicable law to retain some or all of the Customer Data, in which case MAPSLY shall securely isolate this Data, protect it from any further processing, and delete it in accordance with applicable retention periods. Customer Data held in backup systems will be deleted or overwritten in the ordinary course of MAPSLY\u2019s backup rotation cycles following deletion from active systems and will be protected from any further processing until deleted.<\/p>

12. Duties to Inform<\/h2>

M\u00fc\u015fteri Verileri, MAPSLY taraf\u0131ndan i\u015flenirken \u00fc\u00e7\u00fcnc\u00fc taraflarca iflas veya \u00f6deme g\u00fc\u00e7l\u00fc\u011f\u00fc i\u015flemleri veya benzer \u00f6nlemler s\u0131ras\u0131nda el konulmaya tabi olursa, MAPSLY M\u00fc\u015fteriyi gereksiz gecikme olmaks\u0131z\u0131n bilgilendirir. MAPSLY, bu t\u00fcr i\u015flemlerin konusu olan t\u00fcm M\u00fc\u015fteri Verilerinin M\u00fc\u015fteri'nin m\u00fclkiyetinde ve sorumluluk alan\u0131nda oldu\u011funu ve M\u00fc\u015fteri Verilerinin M\u00fc\u015fteri'nin tek tasarrufu alt\u0131nda oldu\u011funu ilgili t\u00fcm taraflara (\u00f6rne\u011fin alacakl\u0131lar, iflas y\u00f6neticisi) gereksiz gecikme olmaks\u0131z\u0131n bildirir.<\/p>

13. Entire Agreement; Conflict; Amendment<\/h2>

This DPA incorporates the Standard Contractual Clauses by reference. Except as amended by this DPA, the Agreement will remain in full force and effect. If there is a conflict among the Standard Contractual Clauses, this DPA, and the Agreement concerning the processing of Customer Data, the Standard Contractual Clauses will control first, this DPA will control second, and the Agreement will control third. For all other matters, the Agreement controls. Nothing in this document varies or modifies the Standard Contractual Clauses. This DPA may be amended in accordance with Section 14.1 of the Agreement, provided that MAPSLY will provide Customer with advance notice of any amendment that materially reduces the protections afforded to Customer Data under this DPA.<\/p>

14. Google Workspace API Data<\/h2>

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.<\/p>

Annex A \u2014 Technical and Organizational Measures<\/h2>

MAPSLY maintains the following technical and organizational measures to protect Customer Data. MAPSLY may update these measures from time to time, provided that no update materially reduces the overall security of the Services.<\/p>