NOTICE TO PEOPLE RECEIVING PRODUCTS OR SERVICES UNDER PERSONAL DATA PROTECTION LAW NO. 6698 (KVKK)
This notice is prepared for people receiving products or services from Çözümtek Bilgi Teknolojileri A.Ş. (our Company), the data controller at Kozyatağı, Özce Center İş Merkezi, İçerenköy Mah. Çayır Cad. No:3 Kat: 8, 34752 Ataşehir / Istanbul, to fulfill the obligation to inform under the Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation. Our personal data protection policies are available at https://cozumtek.com/en/personal-data-protection-policy/.
A. Collection methods and legal bases
Our Company obtains personal data through:
- Written forms
- Applications
- Phone
- Applications such as Zoom and Teams
- Cameras
- The Company website
- Electronic forms (internal application screens)
- Physical delivery by hand
- CRM
- Company applications through CRM
Our Company processes personal data on the following legal bases:
| Legal basis | Category |
|---|---|
| Processing of parties' personal data necessary for entering into or performing a contract, provided it is directly related to that contract. | Identity, Contact, Finance, Customer Transactions, Visual and Audio Records, Employment, Transaction Security |
| Processing necessary to establish, exercise or protect a right. | Customer Transactions, Identity |
| Explicit consent, where you agree to sharing event photographs and videos on social media, websites and similar channels. | Visual and Audio Records |
B. Purposes of processing personal data
Processing is defined in Article 3 of KVKK as recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available and classifying personal data.
Your personal data will be processed for the following purposes under the processing conditions and purposes in Articles 5 and 6 of KVKK:
| Processing purpose | Category |
|---|---|
| Conducting finance and accounting activities | Identity, Contact, Finance |
| Conducting goods and services sales processes | Identity, Contact, Finance, Visual and Audio Records, Customer Transactions |
| Managing access permissions | Contact, Identity, Transaction Security |
| Conducting information security processes | Contact, Identity, Transaction Security |
| Following up requests and complaints | Customer Transactions, Identity, Contact |
| Conducting customer satisfaction activities | Customer Transactions, Identity, Visual and Audio Records |
| Conducting communication activities | Customer Transactions, Identity, Visual and Audio Records, Contact, Employment |
| Marketing products and services | Visual and Audio Records, Identity, Employment, Contact |
| Conducting marketing analysis | Visual and Audio Records, Identity, Contact, Employment |
| Organization and event management | Visual and Audio Records, Identity |
| Managing contracts | Identity, Contact, Customer Transactions |
| Providing after-sales support for goods and services | Identity, Contact, Customer Transactions, Transaction Security |
| Managing customer relationships | Identity, Contact, Transaction Security |
| Storage and archiving | Identity, Contact, Customer Transactions |
| Managing company, product and service loyalty | Identity, Contact, Customer Transactions |
C. Recipients and purposes of transfers
Your personal data may be transferred to the following third parties for the stated purposes under Articles 8 and 9 of KVKK:
| Recipient group | Data category | Transfer purpose |
|---|---|---|
| Archiving service providers | Identity, Contact, Finance | Finance and accounting; contract management |
| Payment service providers | Contact | Finance and accounting; contract management |
| Event and communication service providers (if you consent to event photographs and videos being shared on social media, websites and similar channels) | Visual and Audio Records, Identity | Product and service marketing; organization and event management; contract management |
| Relevant customer | Identity, Contact, Customer Transactions | Customer relationship management; goods and services sales; contract management |
| Relevant supplier | Identity, Contact, Customer Transactions | Supply chain management; contract management; goods and services sales |
| Relevant manufacturer | Identity, Contact, Customer Transactions | Contract management; goods and services sales; communication activities |
| Legal counsel | Identity, Contact, Customer Transactions | Legal affairs and follow-up; contract management |
D. Data subject rights and how to exercise them
Under Article 11 of Law No. 6698, everyone may apply to our Company as data controller to:
- Learn whether your personal data is being processed;
- Request information if your personal data has been processed;
- Learn the purpose of processing and whether the data is used for that purpose;
- Know the third parties to whom personal data is transferred in Türkiye or abroad;
- Request correction of incomplete or inaccurate personal data;
- Request erasure or destruction under the conditions in Article 7 of Law No. 6698;
- Request notification of corrections, erasure and destruction to third parties receiving the data;
- Object to a result against you arising from analysis exclusively by automated systems;
- Claim compensation for damage caused by unlawful processing of personal data.
Complete the application form in accordance with its procedure and submit it through the methods specified there. Applications will be concluded free of charge as soon as possible, according to their nature, and within thirty days at the latest. If additional costs arise, a fee may be requested according to the Board's tariff.
In case of any discrepancy, the Turkish version prevails.