Privacy policy

Controller and processor

For subscriber data uploaded by our customers, the customer is the controller and WinnerMailing is the processor. That data is used only for the customer's own sending; it is never sold, shared or merged across accounts.

Data we collect

• Account data: name, email, password hash, billing details
• Subscriber data: email, name, custom fields, consent source and date, signup IP address
• Delivery events: delivered, opened, clicked, bounced, complained, unsubscribed (for reporting and delivery quality)
• Technical records: server logs, security events

Retention and deletion

Unsubscribed or complaining addresses are kept on the suppression list solely so they are never mailed again. When a customer account is closed, subscriber data is deleted within 30 days; invoice records subject to legal retention are excluded.

Your rights

Under GDPR and KVKK you can exercise your rights of access, rectification, erasure, restriction and objection by writing to privacy@. If you are a subscriber of one of our customers, we forward your request to that customer and follow it through.

Cookies

The website does not use cookies. The management panel uses a session cookie only; there are no tracking or advertising cookies.