Privacy and the protection of personal data

1Data controller

Your personal data is processed by Sona Otomasyon Taahhüt Sanayi ve Ticaret Ltd. Şti. as data controller. Address: Soğanlık Yeni, Muş Sk. Soyak Evreka Sitesi No: 8, A6 Blok Daire 12, 34880 Kartal / İstanbul, Türkiye.

2Personal data processed

There are three forms on the site that collect personal data, and each asks only for what its own job requires. Dealer application form: company name, address, country, city; the contact person's name, role, phone and email address; field of work, years in business and number of completed projects; the systems you work with and the protocols you use, who does the programming, and optionally your experience and company website; the regions to be served and the target project type. Technical support form: full name, email, phone, country, city; your project, who you bought the product from, which Sona product you use and the problem itself. Sales support form: full name, email, phone, country, city; whether you already have an automation server, which side you are on and your question. In all three forms the IP address and browser information the request came from, and the moment you ticked the consent box, are also recorded.

3Purpose of processing

This data is processed only to evaluate your request and to get in touch with you: to assess your application in the case of a dealership application, to point you to a dealer who will take care of the problem in the case of a technical support request, and to answer your question in the case of a sales support request. It is not used for any other purpose and is not added to a marketing list.

4Legal basis

Your data is processed on the basis of your explicit consent. The consent box you tick when you send the form gives that consent. You may withdraw your consent at any time; in that case your form record is deleted.

5Method of collection

Data is collected only through the three forms on the website, entered directly by you: the dealer application, technical support and sales support. No data is collected through any other channel.

6Disclosure to third parties

Your form information is not transferred to third parties. Form data is stored on Sona's own server; no external form service, analytics tool or bot protection service is used. The one exception is a technical support request: when we point your request to a dealer who will take care of it, the information they need to solve the problem is shared with that dealer. We do this only when you have filled in the technical support form, and only for that purpose.

7Retention period

Form records are kept for five years and deleted at the end of that period.

8BMS Desktop application

The application stores the address and port of the automation server it connects to, the username and password for that server, the application PIN, the certificate fingerprints of the servers, the interface language you choose, your screen-saver settings and the step the setup wizard stopped at. This information stays on your own computer, in a single file protected by Windows DPAPI encryption. If you load your own image for the screen saver, a copy of that image is also kept in the application folder.

None of it is sent to Sona or to any third party. The application contains no analytics, telemetry or usage tracking; it needs no internet connection and reaches only your own server on your local network. Application logs are visible inside the application alone and are never exported. The temporary profile of the browser component the application uses is deleted every time the application opens and closes.

You can erase all of this at any time using the application’s “factory reset” function or by uninstalling the application.

9Your rights

You have the right to learn whether your personal data is being processed; to request information about it if it has been processed; to learn the purpose of the processing and whether it is used in line with that purpose; to know the third parties to whom it has been transferred in Türkiye or abroad; to request that it be corrected if it has been processed incompletely or incorrectly; to request that it be erased or destroyed; to request that these actions be notified to the third parties to whom the data has been transferred; to object to a result reached against you through analysis carried out solely by automated systems; and to claim compensation if you suffer loss because of unlawful processing.

10How to apply

You can send requests relating to the rights above to [email protected]. Your request is concluded within thirty days at the latest.