Privacy Notice
Last updated: 22.10.2026. This is an English translation provided for information; the Turkish Aydınlatma Metni prevails.
This notice explains how personal data is processed on the MonitoringSolar website (monitoringsolar.com) and the MonitoringSolar dashboard (panel.monitoringsolar.com), in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"). It is for information only; we do not ask for your consent here.
1. Data controller
SelSun Enerji ve Makine Tic. San. Ltd. Şti. ("SelSun Enerji")
Kazımiye Mah. Dumlupınar Cad. Kılıçoğlu-Danış Towers B Blok Kat 4 D:27, 59860 Çorlu / Tekirdağ, Türkiye
Email: info@sel-sun.com · Phone: +90 506 370 45 23
For companies using the "Your own server" plan, that company is the controller of the data on its server. For customer and staff accounts created by a company (EPC / O&M) in its own workspace, that company is the controller and SelSun Enerji acts as processor.
2. What we process, why, and on what legal basis
| Data | Purpose | Legal basis (KVKK Art. 5/2) |
|---|---|---|
| Identity and contact: name, company, title, phone, email, city | Evaluating sign-ups, opening accounts, providing the service, service and support emails | Entering into and performing a contract (c) |
| Account and security: username, password hash, role, session and login records, IP address, activity logs | Protecting your account, preventing unauthorised access, troubleshooting | Contract (c), legitimate interest (f) |
| Connection details: usernames, passwords or API keys for inverter portals (Huawei, Sungrow, SolarEdge, SMA, etc.) and utility meter (OSOS) portals | Reading plant data from the manufacturer's cloud on your behalf | Contract (c) |
| Plant and operating data: plant name, location, capacity, production and device measurements, meter data, alarms, work orders, photos, inventory and documents | Monitoring, analysis, maintenance management and reporting | Contract (c) |
| Payment and invoicing: billing details, amounts, card token and masked card number | Collecting subscription fees, accounting and tax obligations | Contract (c), legal obligation (ç) |
| Enquiries: information you send us via WhatsApp, email or phone | Replying to your request, preparing quotes | Contract (c), legitimate interest (f) |
We do not process special categories of personal data; please don't enter such data in the dashboard. Your full card number, expiry date and CVV are never sent to us; they are entered on and kept by the payment institution's secure page.
3. How we collect data
Non-automatically from you through sign-up and contact forms, dashboard screens, email and phone; automatically from the inverter / meter portals you connect and from records created while you use the dashboard.
4. Who we share data with
| Recipient | Purpose |
|---|---|
| Our hosting provider — Türkiye | Running the dashboard and database, backups |
| Paratika (Asseco SEE) — licensed payment institution, Türkiye | Card payments |
| Inverter manufacturers you connect (Huawei, Sungrow, SolarEdge, SMA) and distribution company portals | Reading plant data on your instruction (credentials are only sent to that system itself) |
| Google LLC (Google Workspace / Gmail) — abroad | Sending account, report and invoice emails; emails you send us |
| The storage service you choose for archives (Google Drive, Microsoft OneDrive or your own WebDAV server) | Only if you enable it: sending monthly archive files to your own account |
| Competent public authorities | Legally required information requests |
Transfers abroad: Because of Google and (if you choose) Microsoft services, some data may be transferred to servers abroad. These transfers rely on KVKK Art. 9, using the standard contract published by the Turkish Personal Data Protection Board, notified to the Authority. Our dashboard and database are in Türkiye; this website uses no external fonts, analytics or advertising services.
5. How long we keep data
- Account and contract data: for the term of the subscription and 10 years after it ends (Turkish Commercial Code and tax law)
- Payment and invoice records: 10 years
- Security and access logs: 2 years
- Plant measurement data: 36 months in detail on screen depending on plan, then monthly archives; handed over to you and deleted on request when your subscription ends
- Portal credentials: deleted as soon as you delete the connection
- Enquiries: 2 years after the request is closed
6. Security
All connections use HTTPS. User passwords are stored as one-way hashes; portal passwords and API keys are encrypted and never shown on screen. Each company only sees its own data, access is role-based, and data is backed up regularly.
7. Your rights (KVKK Art. 11)
You may ask whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data and erasure or destruction under Art. 7; request that these actions are notified to recipients; object to an adverse outcome resulting solely from automated analysis; and claim compensation for damage caused by unlawful processing.
8. How to apply
Send a request including your name, ID or passport number, address, contact details and your request — in writing with a wet signature to our address, signed with a qualified electronic or mobile signature to info@sel-sun.com, or from the email address registered in the dashboard to info@sel-sun.com. We respond free of charge within 30 days at the latest.