OPanel OPanel
DATA PRIVACY COMPLIANCE

GDPR & KVKK

We protect your data privacy under global and local standards. Our clarification declaration within the framework of the European Union Regulation and Law No. 6698.

Effective Date: May 13, 2026 Document: OP-REG-09

As oPanel ("Company" or "Data Controller"), we show maximum sensitivity to the security of our users' personal data. With this awareness, we ensure that all kinds of personal data belonging to persons who benefit from the products and services offered by our Company are processed and preserved in accordance with the rules of the Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR").

Data Controller Identity:

Title: oPanel Information Technologies Inc.

Email: privacy@opanel.net

DPO (Data Protection Officer): dpo@opanel.net

1. Processed Personal Data Categories

oPanel conducts contracts directly with Resellers and does not require End Users to create retail accounts. Within this scope, the collected data is as follows:

Data Subject Primary Data Processed Legal Ground
Resellers (Corporate) Reseller representative Name/Surname, Corporate Email, Phone, Tax Number/Office, Company Address. Establishment of the dealership agreement, billing, and reseller panel access.
End Users Installed Server IP Address, License Key Identifier Hash Value. Technical necessity to ensure that the software only operates on the actively licensed server.

IMPORTANT INFORMATION (PAYMENT & CARD): oPanel does not receive any direct payment from End Users. End Users make their payments directly to the Reseller they purchased the license from.

Financial instrument information used only by corporate Resellers when topping up balance on oPanel is never kept in our systems; it is transmitted to the bank fully encrypted through PCI-DSS Level 1 certified intermediary institutions.

2. Purposes of Processing Personal Data

Your personal data is processed only for the following corporate purposes within the limits specified in the law:

  • Making technical definitions of oPanel licenses in the quantities requested by Resellers,
  • Verifying the license status (Active/Passive) through End User server IPs,
  • Conducting wholesale license billing processes for Resellers in compliance with the legislation,
  • Preventing cyber attacks against the main oPanel servers and the license distribution API.

3. To Whom and for What Purpose Personal Data May Be Transferred

oPanel never sells, rents, or shares your personal data with marketing networks to generate commercial income. Your data is only transferred;

  • To accounting and billing automation integrations (for executing legal notifications),
  • To the payment intermediary institution (to confirm the relevant collection),
  • Can be transferred to official authorities making requests within the framework of legal and judicial demands (Prosecutor's Office, ICTA, Courts, etc.) as required by the relevant legislation.

4. Rights of the Data Subject (What are Your Rights?)

Pursuant to both GDPR Articles 12-23 and KVKK Article 11, you as data subjects have the following rights:

Right of Access and Information You have the right to learn which of your data is processed and request a copy of your data.
Right of Rectification and Deletion (Erasure) You can request the correction of incomplete or incorrect data, and the complete destruction of data at the end of the legal retention period.
Right to Data Portability Under the GDPR, you can receive your data in a common, machine-readable format (.json/.xml).
Restriction of Processing and Objection You can object at any time to the restriction of your data for certain processing activities.

5. Exercise of Rights and Method of Application

To exercise your rights mentioned above, you can submit your applications to our company in writing, with a secure electronic signature, or via your email address registered in our systems using the following methods:

Application by Email:

You can start your application by sending it directly to privacy@opanel.net or dpo@opanel.net.

* Depending on the nature of your request, you will be responded to free of charge within 30 (thirty) days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.