Data Protection Law Disclosure Text

1. Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data will be processed within the framework specified below.

2. Processed Personal Data

Within the scope of our services, your personal data in the following categories is processed:

2.1. Identity Data

• Name, surname
• Turkish ID number (as required by legal obligations)
• Date of birth

2.2. Contact Data

• Email address
• Phone number
• Address information
• Fax number

2.3. Customer Transaction Data

• Project requests
• Quote information
• Contract information
• Invoice information
• Payment information

2.4. Marketing Data

• Marketing and communication preferences
• Campaign information
• Subscription information

2.5. Transaction Security Data

• IP address
• Cookie information
• Log records
• Browser information

2.6. Visual and Audio Records

• Photos (project images, event photos)
• Video recordings (project presentations)

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Evaluation and fulfillment of your service requests
• Preparing, presenting and executing quote and contract processes
• Project management, tracking and delivery
• Customer relationship management and increasing customer satisfaction
• Conducting communication activities
• Executing invoice, invoicing and accounting operations
• Fulfillment of legal obligations
• Resolution of legal disputes
• Website analysis and improvement of user experience
• Security and fraud prevention activities
• Marketing and promotional activities (with explicit consent)
• Newsletter and campaign sending (with explicit consent)

4. Legal Basis for Processing Personal Data

Your personal data is processed for the following legal reasons:

• KVKK Art. 5/2-a: Existence of your explicit consent
• KVKK Art. 5/2-c: Being directly related to the establishment or performance of the contract
• KVKK Art. 5/2-e: Being necessary for the data controller to fulfill its legal obligation
• KVKK Art. 5/2-f: The processed data being made public by the data subject
• KVKK Art. 5/2-ç: Data processing being necessary for the establishment, exercise or protection of a right
• KVKK Art. 5/2-f: Data processing being necessary for our legitimate interests

5. Transfer of Personal Data

Your personal data may be transferred to the following third parties for the purposes stated above:

5.1. Domestic Transfers

• Public institutions and organizations due to our legal obligations
• Our service providers (hosting, cloud storage, email services)
• Analytics and marketing tool providers
• Payment processing companies
• Our legal advisors and accounting firms
• Our business partners and suppliers

5.2. International Transfers

Your personal data may be transferred to foreign countries where our service providers are located. These transfers are made to countries with adequate protection or with written undertakings in countries without adequate protection, within the framework of KVKK Art. 9 provisions and Personal Data Protection Board decisions.

10. Rights of the Data Subject (KVKK Art. 11)

In accordance with KVKK Art. 11, you have the following rights:

• Request information: Learning whether your personal data is processed, requesting information if processed
• Learn processing purpose: Learning the purpose of processing and whether they are used in accordance with their purpose
• Domestic/international transfer information: Knowing the third parties to whom personal data is transferred domestically or abroad
• Request correction: Requesting correction if incomplete or incorrectly processed
• Request deletion/destruction: Requesting deletion or destruction within the framework of conditions stipulated in KVKK Art. 7
• Notification to third parties: Requesting that correction, deletion, destruction operations be notified to third parties to whom personal data is transferred
• Object: Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems
• Request compensation for damage: Requesting compensation for damage in case of damage due to unlawful processing of personal data

11. Application Method

To exercise your rights stated above, you can apply by the following methods with documents identifying your identity:

In your application, you must specify the explanations regarding the right and subject you are requesting. Your application will be finalized within 30 (thirty) days at the latest, depending on the nature of your request.

If your application is rejected, the response given is found insufficient, or no response is given to the application within the time limit, you can file a complaint with the Personal Data Protection Board in accordance with KVKK Art. 14.

12. Changes

This Disclosure Text may be changed due to changes in legal regulations, updates in our business processes or new decisions of the Personal Data Protection Board. Important changes will be announced on our website.

13. Contact

You can contact us for questions about your rights under KVKK and the processing of your personal data: