Website Privacy Notice
Website Privacy Notice
As İnfina Yazılım A.Ş. (the “Company”), acting as the data controller within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we respect the privacy of private life and exercise the utmost care in protecting your personal data.
In this context, pursuant to the KVKK, we would like to inform you about the purposes of processing your personal data, the transfer of your personal data, the methods by which your personal data are collected, and your rights in relation to your personal data.
a) Purposes for Which Personal Data Are Processed
Within the scope of the processes carried out through our website, personal data necessary for the relevant process may be processed, primarily including identity data (name and surname), contact data (email address and/or telephone number), and information relating to the content of your request/application.
Your personal data will be processed for the purposes of:
- Receiving, assessing, referring to the relevant Company departments and responding to information requests, communications, opinions, requests and applications submitted through the website,
- Providing information about the products and services offered by the Company in line with your request,
- Communicating with the relevant persons in connection with submitted requests and applications,
based, depending on the nature of the relevant personal data processing activity, on the legal grounds set forth under Article 5(2) of the KVKK, namely that “processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract” and that “processing of personal data is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not prejudiced.”
Accordingly, the processing of personal data for receiving, assessing and responding to information and communication requests concerning products and services, as well as for carrying out communication activities, is based on the legitimate interests of the Company; whereas processing activities relating to the establishment or performance of a contract are based on the necessity of processing personal data for the establishment or performance of such contract.
b) Purposes for Which and Parties to Whom Processed Personal Data May Be Transferred
Your personal data may be transferred to third parties for the purposes set out below, provided that the personal data transfer conditions stipulated under Article 8 of the KVKK are met and only to the extent necessary for the relevant transfer purpose:
- Where necessary or requested, they may be shared with authorized persons, public institutions and organizations for the purpose of fulfilling legal obligations.
- They may be shared, on a limited basis, with our attorneys who are subject to confidentiality obligations for the purpose of conducting and following up legal proceedings.
c) Method and Legal Grounds for Collection of Personal Data
Your personal data are collected, in accordance with the purposes specified in section (a) of this Notice and on the legal grounds set forth under Article 5(2) of the KVKK, through the channels specified below, by wholly or partly automated means or by non-automated means provided that such processing forms part of a data filing system. In this context, your data may be collected through:
- Completion of the contact form available on our website,
- Contacting us by email,
- Contacting us through social media platforms.
As a general rule, personal data relating to third parties should not be shared through the contact form. Where personal data relating to third parties are shared, the person making such disclosure is responsible for ensuring that the sharing of such data with the Company is lawful and that the necessary notices have been provided. Nevertheless, the Company fulfils its obligations arising under the KVKK and applicable legislation in respect of personal data obtained through third parties.
d) Your Rights under Article 11 of the KVKK
As a data subject, if you submit your requests concerning your rights to the Company through the methods set out below in this Privacy Notice, the Company will conclude your request free of charge as soon as possible and, in any event, within thirty days, depending on the nature of the request. However, where the relevant process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.
In this context, data subjects have the right to:
- Learn whether their personal data are being processed,
- Request information if their personal data have been processed,
- Learn the purpose of processing their personal data and whether such data are being used in accordance with that purpose,
- Know the third parties to whom their personal data have been transferred, whether in Türkiye or abroad,
- Request rectification of personal data if they have been processed incompletely or inaccurately, and request notification of the rectification to third parties to whom the personal data have been transferred,
- Request the deletion or destruction of personal data where the reasons requiring their processing cease to exist, despite the data having been processed in accordance with the KVKK and other applicable laws, and request notification of such action to third parties to whom the personal data have been transferred,
- Object to any outcome arising against the person as a result of the analysis of processed data exclusively through automated systems,
- Claim compensation for damages suffered as a result of the unlawful processing of personal data.
In this context, you may submit your requests concerning your personal data to the Company through one of the methods below, using the [Data Subject Application Form], which contains explanations regarding the information required in your application and the application methods. Use of the Data Subject Application Form is not mandatory; applications containing the mandatory elements prescribed under the applicable legislation will also be considered by the Company.
- By delivering your written application in person or sending it by post to Altunizade, Ord. Prof. Dr. Fahrettin Kerim Gökay Cd. No:38, Üsküdar/İstanbul, Türkiye,
- Through our registered electronic mail (KEP) address at [[email protected]],
- By sending an email to [[email protected]] using a secure electronic signature, mobile signature, or an email address previously notified by you to the Company and registered in our systems,
or through any other methods that may be determined by the Personal Data Protection Board in the future.
Depending on the nature of the application and where it is necessary to verify that the applicant is the relevant data subject, the Company may request additional information and documents for identity and authorization verification in order to ensure that the application is concluded securely and to prevent personal data from being disclosed to unauthorized third parties.
In this context, you may submit your requests concerning your personal data to the Company through one of the methods below, using the [Data Subject Application Form], which contains explanations regarding the information required in your application and the application methods. Use of the Data Subject Application Form is not mandatory; applications containing the mandatory elements prescribed under the applicable legislation will also be considered by the Company.
- By delivering your written application in person or sending it by post to Altunizade, Ord. Prof. Dr. Fahrettin Kerim Gökay Cd. No:38, Üsküdar/İstanbul, Türkiye,
- Through our registered electronic mail (KEP) address at [[email protected]],
- By sending an email to [[email protected]] using a secure electronic signature, mobile signature, or an email address previously notified by you to the Company and registered in our systems,
or through any other methods that may be determined by the Personal Data Protection Board in the future.
Depending on the nature of the application and where it is necessary to verify that the applicant is the relevant data subject, the Company may request additional information and documents for identity and authorization verification in order to ensure that the application is concluded securely and to prevent personal data from being disclosed to unauthorized third parties.
e) Retention Period for Personal Data
The Company retains personal data for the period prescribed by applicable legislation or for as long as necessary for the purposes for which they are processed. Where the purposes and legal grounds requiring the processing of personal data cease to exist and, where applicable, the mandatory retention periods prescribed under applicable legislation expire, the personal data will be deleted, destroyed or anonymized in accordance with applicable legislation.
f) Amendments and Updates
This Privacy Notice has been prepared within the scope of the Turkish Personal Data Protection Law No. 6698 and other applicable legislation. Necessary amendments may be made to this Privacy Notice in line with changes in applicable legislation and/or the Company’s purposes and policies concerning the processing of personal data.
The current version of this Privacy Notice will be made available to data subjects through our website.