Data Protection Notice

1. Data controller

Under Turkish law no. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by the company identified below, acting as data controller.

2. Purposes of processing

• Delivering the software development, consulting and other services you request
• Contacting you, answering your questions and keeping you informed
• Preparing proposals, running contract processes and issuing invoices
• Meeting legal obligations under tax, commercial and other applicable legislation
• Improving client satisfaction and developing our services
• Informing you about campaigns, new services and updates, where you have consented
• Securing our services and preventing unauthorised access

3. Categories of personal data processed

• Identity data: name, surname, national ID number where required, date of birth
• Contact data: email, telephone, address, company details
• Client transaction data: proposals, contracts, project details, payment and invoice records
• Transaction security data: IP address, cookie records, browser and device information
• Marketing data: contact preferences, areas of interest, demographic information
• Candidate data: role applied for, portfolio or LinkedIn link, the CV you send (job applications only)

4. Transfer of personal data

Within the conditions set out in articles 8 and 9 of the KVKK, your personal data may be transferred — with security safeguards in place — to technology providers, hosting companies, payment systems, legal authorities, legal and financial advisers, and cloud providers located abroad such as AWS and Google Cloud.

5. Method and legal basis of collection

• Methods: website forms, email, telephone and WhatsApp contact, in-person meetings, contract processes, cookies
• Legal bases: formation or performance of a contract (KVKK art. 5/2-c), legal obligation (art. 5/2-ç), legitimate interest (art. 5/2-f), explicit consent (art. 5/1)

6. Rights of the data subject

• Learn whether your personal data is being processed
• Request information where it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom it is transferred, at home or abroad
• Request correction where it is incomplete or inaccurate
• Request erasure or destruction within the conditions of the KVKK
• Request that correction and erasure be notified to third parties
• Object to an adverse outcome produced solely by automated analysis
• Claim compensation for damage arising from unlawful processing

7. How to exercise your rights

Together with documents establishing your identity, you may apply by sending a signed petition to our registered address, by email using a registered electronic mail address, secure electronic signature or mobile signature, or through the contact form on this website. Applications are concluded free of charge within 30 days at the latest; where the process incurs a cost, the tariff set by the Data Protection Board applies.

8. Data security

We apply technical and organisational measures including SSL-encrypted transmission, secure storage and backup, access control and authorisation, staff training, regular security audits and maintenance of processing records.

9. Retention periods

• Contract and invoice records: 10 years, as required by tax legislation
• Contact records: one year after the purpose of contact ends
• Marketing consents: until consent is withdrawn
• Website cookies: the periods stated in the cookie policy
• At the end of the retention period data is erased, destroyed or anonymised

10. Cookie policy

We use cookies to improve the experience on this site. Strictly necessary cookies cannot be disabled; analytics cookies can be managed from your browser settings.

11. Changes

This notice may be revised in line with changes in legislation or company policy. The current version is always available on this page.