Data Protection Notice
The disclosure notice prepared as data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK), for our international clients.
Updated:
Prepared by Boygantech Yazılım ve Dijital Pazarlama as data controller under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”). It is the English counterpart of the Turkish notice and is provided for our international clients.
This is a general template and should be adapted to your organisation’s actual processes. We recommend a legal review before publishing it.
1. Identity of the controller
Boygantech Yazılım ve Dijital Pazarlama İstanbul, Türkiye info@boygantech.com
2. Categories of personal data
- Identity data: first name, last name
- Contact data: email address, phone number where shared
- Customer transaction data: enquiry content, company name, budget range
- Transaction security data: IP address, access logs, browser information
3. Purposes of processing
- Responding to your enquiry
- Preparing a quote and conducting pre-contractual discussions
- Performing the service and invoicing where a contract is concluded
- Ensuring information security and preventing abuse
- Fulfilling statutory obligations
4. Legal grounds
Processing is based on Article 5/2 of the KVKK:
- Directly related to the conclusion or performance of a contract (Art. 5/2-c)
- Necessary for compliance with a legal obligation of the controller (Art. 5/2-ç)
- Necessary for the legitimate interests of the controller, provided your fundamental rights are not harmed (Art. 5/2-f)
Where none of these grounds applies, processing takes place only with your explicit consent, which you may withdraw at any time.
5. Method of collection
Personal data is collected by partly automated means through the website contact form, email correspondence, telephone calls and automated server logs.
6. Transfers
To the extent strictly necessary to deliver the service, your personal data may be transferred to hosting and security providers, the email infrastructure provider, and — where legally required — competent public authorities. Where a transfer abroad occurs, the conditions of Article 9 of the KVKK are satisfied.
7. Retention
Data is retained for as long as the purpose requires, taking into account the limitation periods set by applicable legislation. Once the period expires, data is deleted, destroyed or anonymised.
8. Your rights
Under Article 11 of the KVKK you may:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom it is transferred domestically or abroad
- Request rectification if it is incomplete or inaccurate
- Request erasure or destruction
- Request that rectification, erasure or destruction be notified to third-party recipients
- Object to a result adverse to you arising from analysis solely by automated systems
- Claim compensation for damage arising from unlawful processing
9. How to apply
Send your request to info@boygantech.com together with information identifying you. Applications are concluded free of charge within 30 days. Where the process incurs an additional cost, the fee set out in the Board’s tariff may be charged.