Data Protection & GDPR Compliance

1. Data Controller Statement

In our capacity as Data Controller under GDPR, KVKK, and relevant international privacy regulations, Plus Software and IT Technologies hereby informs you regarding the legal grounds, categories, processing purposes, and your statutory rights regarding personal data collected via our website, software platforms (PlusClinic, PlusLMS, PlusDICOM Converter), and consultancy engagements.

2. Legal Grounds for Processing

Your personal data is processed strictly under the following lawful bases:

• Performance of a Contract: Providing requested demo access, software licenses, IT services, and responding to business inquiries.
• Explicit Consent: Sending commercial proposals and processing optional contact form details.
• Legitimate Interests: Securing server infrastructure, preventing cyber attacks, and maintaining platform uptime.
• Legal Obligations: Retaining mandatory financial, tax, and server access logs pursuant to applicable statutory regulations.

3. Healthcare & Sensitive Data Protection

Plus Software designs software solutions (e.g., PlusClinic, PlusDICOM Converter) tailored for healthcare providers. Special categories of data (e.g., electronic health records, diagnostic imaging files) are processed exclusively on behalf of our healthcare clients acting as Data Controllers, with Plus Software serving as a compliant Data Processor under rigorous ISO 27001, DICOM 3.0, HL7/FHIR, and health data security frameworks.

4. Rights of Data Subjects

Under GDPR and KVKK, you possess the right to:

• Request confirmation as to whether your personal data is being processed,
• Request a copy of your personal data held by us,
• Request rectification of inaccurate or incomplete data,
• Request erasure or restriction of processing where applicable,
• Object to processing based on legitimate interests,
• Withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.