JUS. UYAP Extension — Privacy Policy

1. Introduction

This Privacy Policy explains how Veri Security Bilişim ve Danışmanlık Hizmetleri A.Ş. ("Company") processes, stores, and protects personal data through the JUS. UYAP Extension ("Extension"). The Company is committed to full compliance with the applicable laws and regulations, including but not limited to the Turkish Personal Data Protection Law (KVKK, Law No. 6698), the General Data Protection Regulation (GDPR), and other relevant legal frameworks.

2. Scope and Definitions

This policy applies to the processing of:

Court files and documents retrieved from UYAP,
User authentication data,
User settings and preferences stored within the Extension,
Technical records generated by the Extension.

The Extension is exclusively designed to integrate the JUS. application with the UYAP system. It does not collect browsing history, third-party site data, or any information outside the UYAP and JUS ecosystem.

3. Categories of Data Processed

The following categories of data may be processed:

Identity and access data: Authentication credentials used for secure access to UYAP (e.g., tokens, passwords), processed only during the active session.
UYAP file and document data: Case files and documents downloaded, classified, and managed within the JUS. application upon user request.
Preferences and configuration data: User settings and configuration choices stored locally to ensure consistent functionality.
Technical logs: Error logs and operational records necessary for security, functionality, and audit purposes.

4. Purposes of Data Processing

The collected data are processed solely for the following purposes:

To enable secure access to the UYAP system,
To download, classify, and manage UYAP documents systematically,
To allow users to submit documents to UYAP via the JUS. application,
To remember user preferences and improve the user experience,
To ensure compliance with security, audit, and legal obligations.

5. Data Transfers and Sharing

Data are processed only between the UYAP system and the JUS. application.
Personal data are not shared with third parties.
Data may only be disclosed to competent public authorities or courts when legally required.
The Extension does not perform remote code execution and does not transfer data without user control.

6. Data Retention

Authentication and session data are retained only for the duration of the session and deleted once the browser is closed.
UYAP files and documents are stored solely within the user's JUS. account and not beyond.
Technical logs are retained for limited periods to ensure security and audit requirements and are deleted periodically.

7. Data Security Measures

The Company applies appropriate technical and organizational measures to ensure data security, including:

TLS/SSL encryption for data transmission,
Role-based access control and strict authorization policies,
Regular security testing and system logging,
Compliance with KVKK, GDPR, and recognized industry standards.

8. User Rights

Users have the following rights under KVKK and GDPR:

To access the personal data processed,
To request rectification of inaccurate or incomplete data,
To request deletion or erasure of personal data,
To obtain information regarding the processing activities,
To exercise other statutory rights such as data portability and objection to processing.

Requests can be submitted via [email protected].

9. Limitation of Liability

The Extension is solely developed to enable integration between the JUS. application and the UYAP system.
The Company is not liable for any inaccessibility, errors, or data loss caused by the UYAP infrastructure.
Users are responsible for verifying the accuracy and validity of documents retrieved from UYAP.
The Company disclaims liability for damages resulting from improper, unauthorized, or unlawful use of the Extension.

10. Policy Updates

The Company reserves the right to amend this Privacy Policy in order to comply with changes in applicable legislation, technical updates, or security requirements.