Privacy Policy
Last updated: 03 Oct 2026
This Privacy Policy explains how Company Name Ltd. ("we", "us") processes personal data when you visit http://oneviewplayer.berkcan.tr, use a customer account, buy a license or use the "One View Player" application (the "App"). It is based on the General Data Protection Regulation (EU) 2016/679 ("GDPR"). Information on cookies is provided in our Cookie Policy.
1. Controller
The controller is Company Name Ltd., Street 1, 00000 City, Country, represented by Managing director. E-mail: hello@berkcan.tr, telephone: +00 000 000 000. For privacy requests you can also write to support@berkcan.tr or use the contact form. Further details are in the Imprint.
2. Nature of our service
One View Player is a media player only. It plays playlists (M3U or Xtream Codes) that you obtain yourself. We do not provide, sell, host or distribute any content, channels or playlists, and we do not record which channels or programmes you watch.
3. Overview
| Data category | Purpose | Legal basis | Retention |
|---|---|---|---|
| Server log data (IP address, time, request) | Delivery and security of the website | Art. 6(1)(f) GDPR | Up to 12 months |
| Account data | Providing the customer account | Art. 6(1)(b) GDPR | While the account exists |
| Billing, order and payment data, invoices | Performing the contract, accounting, tax | Art. 6(1)(b) and (c) GDPR | Statutory retention period (up to 10 years) |
| Device data and usage counters | Trial, licensing, pairing, support, abuse prevention, aggregated statistics | Art. 6(1)(b) and (f) GDPR | Up to 2 years after last activity |
| Playlist data | Delivering playlists to your device, support, preventing illegal use | Art. 6(1)(b) and (f) GDPR | Until deleted by you, account deletion or device removal |
| Contact messages | Answering your enquiry | Art. 6(1)(b) and (f) GDPR | 2 years |
| Security and audit logs | Protecting accounts and systems | Art. 6(1)(f) GDPR | Up to 12 months |
| Marketing e-mail data | Newsletters and offers | Art. 6(1)(a) GDPR | Until consent is withdrawn |
4. Visiting the website and server logs
When you access http://oneviewplayer.berkcan.tr, our hosting provider's servers automatically process the IP address, date and time, requested page, referrer, browser type and operating system. This is technically necessary to deliver the website and to detect attacks and errors (Art. 6(1)(f) GDPR). We only use strictly necessary cookies; there is no analytics, advertising tracking, third-party embedding or loading of external fonts.
5. Customer account
To create an account we process your name, e-mail address, password (stored only as a one-way hash), optionally your telephone number, your preferred language and, if you opt in, your marketing consent. You can sign in with your password or with a single-use sign-in link sent by e-mail. We send a link to verify your e-mail address. Processing is necessary to provide the account (Art. 6(1)(b) GDPR). In your profile you can export your data in JSON format and delete your account.
6. Orders, payments and invoices
When you place an order we process your billing data (name or company, VAT ID, address, postcode, city, country), the order number, plan, amounts, taxes, payment status, any bank transfer receipt you upload and order notes. Payment is made by bank transfer; the bank shares with us the payer details shown on the transfer. We issue invoices that are available in your account. Processing is necessary to perform the contract (Art. 6(1)(b) GDPR) and to comply with tax and accounting obligations, including VAT determination under the One-Stop-Shop scheme (Art. 6(1)(c) GDPR).
7. Device registration and free trial
At the first launch of the App, the device registers with our server. We process the device ID, platform, model, firmware version, App version, App language, IP address and the times of first and last contact. On smart TVs the device ID is the network MAC address; on other platforms the App generates a random ID in the same format. The device ID is used to start and track the free trial of 7 days, to bind licenses to the device and to prevent the trial from being reset by reinstalling the App. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in the integrity of the trial and in preventing abuse (Art. 6(1)(f) GDPR). No account is needed for the trial.
8. Pairing a device with your account
The App displays a QR code and a six-character code. When you scan it and sign in, we link the device ID to your account so that you can manage the device, send playlists and buy or renew licenses. The legal basis is Art. 6(1)(b) GDPR. You can remove a device from your account at any time.
9. Playlists
We process the playlist details you send to a device from the website as well as those you enter directly in the App, which the App synchronises with our server: M3U URL, Xtream server URL, username, password, EPG URL and playlist name. These details are stored in encrypted form; only the host name of the server is stored in clear text for support and abuse prevention. Authorised staff may view the details where necessary for support, for delivery to your device and to prevent illegal use. Legal bases: Art. 6(1)(b) GDPR and our legitimate interest in preventing misuse of our service (Art. 6(1)(f) GDPR). We do not use the access details to access content ourselves except where strictly necessary to investigate a support request you have made.
10. Usage data (heartbeat)
While the App is running it sends periodic status signals. We store daily counters per device: number of launches, number of heartbeats and whether playback was active at the time of a heartbeat. We do not record what was played. We use these data to operate and secure the service, to detect abuse and to compile statistics in aggregated form (Art. 6(1)(f) GDPR).
11. Contact form and e-mail
If you contact us we process your name, e-mail address, subject, message and IP address to answer your enquiry and to prevent spam (Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR).
12. Service e-mails
We send e-mails necessary for the contract, such as sign-in links, verification e-mails, order and payment confirmations, license activations and invoices (Art. 6(1)(b) GDPR). These are sent via an e-mail delivery provider acting as our processor.
13. Marketing
We only send newsletters or offers if you have actively consented (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, using the link in each e-mail or in your profile.
14. Security
We log sign-ins (time and IP address) and security-relevant actions in the account and in the administration area to detect unauthorised access and misuse (Art. 6(1)(f) GDPR). We use technical and organisational measures such as encrypted transmission (TLS), encryption of sensitive data, password hashing and access restrictions.
15. Recipients
Personal data are disclosed only where necessary to the following categories of recipients: hosting provider, e-mail delivery provider (both as processors under Art. 28 GDPR), accountant or tax advisor, banks involved in payments, and public authorities and courts where we are legally obliged to do so. We do not sell personal data.
16. Transfers outside the EEA
We aim to process data within the European Economic Area. If data are transferred to a country outside the EEA, this only takes place in compliance with Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision of the European Commission or standard contractual clauses. You can request a copy of the relevant safeguards using the contact details above.
17. Retention
- Account data: as long as the account exists.
- Invoices and accounting documents: for the statutory retention period (up to 10 years).
- Device and usage data: up to 2 years after the last activity of the device.
- Security and server logs: up to 12 months.
- Contact messages: 2 years.
- Playlist records: until you delete them, delete your account or remove the device.
When you delete your account, data are erased unless statutory retention obligations apply; invoices are retained as legally required.
18. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7(3)). Many of these rights can be exercised directly in your profile; otherwise write to support@berkcan.tr.
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to direct marketing at any time without giving reasons.
19. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular the supervisory authority of your habitual residence, place of work or the place of the alleged infringement, or the authority competent for us (Art. 77 GDPR).
20. Children
Our services are not directed at persons under 16. We do not knowingly process data of children under 16. If you believe that a child has provided us with personal data, please contact us so that we can delete it.
21. Automated decisions
We do not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects you (Art. 22 GDPR).
22. Obligation to provide data
You are not legally obliged to provide personal data. However, without the data marked as required we cannot create an account, process an order or operate the App on your device.
23. Changes
We may update this Privacy Policy when our services or the legal situation change. The current version is always available on this page. Where changes significantly affect you, we will inform you in advance by e-mail or in your account.