Privacy and Protection of Personal Data

Depending on your relationship with the Company and the services you use, the following categories may be processed:

• Identity data: name, surname, and where needed other information that identifies you.
• Contact data: email address, telephone number, company details, and postal address.
• Client and prospective client data: the company you work for, your role, the services you ask about, and project or quote details.
• Correspondence: contact forms, email threads, support requests, and the messages you send us.
• Transaction and technical data: IP address, access time, browser and device information, error logs, security logs, and similar technical records.
• Website usage data: the pages you open, what you interact with, and which features you use.
• Contract and transaction records: where a service relationship is formed, the contracts, quote process, service scope, and records of the commercial relationship.
• Anything else you send us: other information you choose to share when you contact us or use our services.

We do not ask for special categories of personal data unless the nature of the service or the transaction requires it. Please do not send special categories of personal data through the contact forms or other free-text fields unless it is necessary.

Your personal data may be collected by electronic or physical means through:

• our website and the contact forms on it,
• email, telephone, and other channels,
• meetings and commercial discussions,
• quote and contract processes,
• support and customer service channels,
• the digital systems the Company uses,
• web servers, security systems, and necessary cookies,
• business partners or publicly available sources, where the law permits it.

Depending on the transaction, your personal data may be processed in order to:

• answer the questions and requests you send us,
• give you information about our services,
• assess quote and project requests,
• manage relationships with clients and prospective clients,
• deliver software development, consultancy, support, and similar services,
• form and perform contracts,
• provide technical support and customer service,
• keep the website working, fast, and secure,
• run our information security processes,
• prevent unauthorised access, misuse, fraud, and other security risks,
• improve the quality of our systems and services,
• manage legal disputes and protect our rights,
• meet obligations arising from legislation,
• respond to lawful requests from authorised public bodies,
• carry out commercial communication and marketing where that is needed and the legal conditions are met.

We do not use your personal data for purposes incompatible with those it was collected for, or for purposes with no legal basis under the applicable legislation.

Depending on the processing, those grounds are in particular:

• processing is expressly provided for by law,
• processing is directly related to forming or performing a contract,
• processing is necessary for the Company to meet its legal obligations,
• processing is necessary to establish, exercise, or protect a right,
• processing is necessary for the Company's legitimate interests, provided it does not harm your fundamental rights and freedoms.

Your personal data may be shared, only so far as it is necessary and in line with the purpose of processing and the applicable legislation, with:

• authorised employees and units within the Company,
• infrastructure and hosting providers,
• email and corporate communication providers,
• information technology and cyber security providers,
• accounting, legal, and similar professional service providers,
• suppliers and business partners who help deliver our services,
• public bodies, courts, and other official authorities empowered by law.

In setting a retention period we take into account:

• the purpose the data was processed for,
• how long your relationship with us lasts,
• contractual and legal obligations,
• limitation periods for possible legal disputes,
• information security and record-keeping requirements.

The Company applies technical and administrative measures suited to the risks, in order to prevent personal data from being:

• processed unlawfully,
• accessed unlawfully,
• altered or shared by unauthorised people,
• lost or damaged,

and in order to maintain an appropriate level of security.

Under article 11 of the KVKK, and so far as the conditions are met, you may apply to the Company to:

• learn whether your personal data is being processed,
• request information about it if it has been processed,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• learn which third parties inside or outside Türkiye the data has been transferred to,
• have the data corrected if it has been processed incompletely or wrongly,
• have the data deleted or destroyed where the conditions in the legislation are met,
• have any correction, deletion, or destruction notified to the third parties the data was transferred to,
• object to a result reached against you through analysis carried out solely by automated systems,
• claim compensation if you suffer loss because your personal data was processed unlawfully.

Your application should contain:

• your name and surname,
• information that verifies your identity, appropriate to the nature of the request,
• a clear and understandable description of what you are asking for,
• the contact details you want the answer sent to,
• any information and documents that support your request.