Personal Data Protection Notice (KVKK)

1. Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by the data controller OSLOSOFT BİLİŞİM TEKNOLOJİLERİ DANIŞMANLIK HİZMETLERİ LİMİTED ŞİRKETİ ("OsloSOFT" or "Company") within the scope explained below.

2. Purposes of Processing Personal Data

Your personal data is processed by OsloSOFT for the following purposes:

• Evaluation and response to communication requests
• Preparation and presentation of quotations and pricing information
• Management and development of customer relationships
• Improvement and enhancement of service quality
• Fulfillment of legal obligations
• Analysis and improvement of website performance
• Conduct of information security processes
• Conduct and supervision of business activities

3. Categories of Personal Data Processed

Categories of personal data processed within the scope of our website and services:

• Identity Information: Name, surname
• Contact Information: Email address, phone number, company name
• Transaction Security Information: IP address, cookie records, log records
• Customer Transaction Information: Request content, meeting notes, project information

4. Transfer of Personal Data

Your collected personal data may be transferred to the following parties within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK:

• To public institutions and organizations for the fulfillment of legal obligations
• To our business partners from whom we receive technical support and consulting services
• To cloud service providers (for data hosting purposes)
• To Google LLC based abroad for analytics and reporting services (Google Analytics)

Data transfer abroad is carried out in accordance with Article 9 of the KVKK, with adequate protection and within the scope of the list of countries with adequate protection declared by the Personal Data Protection Board.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through the following methods:

• Through contact forms on our website
• Applications made via email
• Telephone conversations
• Cookies and similar technologies

Your personal data is processed based on the legal grounds specified in Articles 5 and 6 of the KVKK:

• Existence of your explicit consent
• Being directly related to the establishment or performance of a contract
• Being necessary for the data controller to fulfill its legal obligation
• Being necessary for the processing of data for the legitimate interests of the data controller

6. Rights of the Data Subject Under Article 11 of the KVKK

In accordance with Article 11 of the KVKK, as personal data subjects, you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose
• To know the third parties to whom your personal data is transferred domestically or abroad
• To request correction of your personal data if processed incompletely or incorrectly
• To request deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK
• To request notification of correction, deletion and destruction operations to third parties to whom personal data has been transferred
• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
• To request compensation if you suffer damage due to unlawful processing of your personal data

7. Application Methods

You can submit your applications to exercise the rights specified above through the following methods:

Your applications must include:

• Name, surname and signature if the application is written
• Turkish ID number for Turkish citizens, nationality, passport number or ID number if any for foreigners
• Residential or business address for notification
• Email address, phone and fax number for notification, if any
• Subject of the request

Our company will finalize the request free of charge as soon as possible and within a maximum of 30 (thirty) days depending on the nature of your application. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged.

8. Retention Period of Personal Data

Your personal data is stored for the period necessary for the purpose for which they are processed and taking into account the periods stipulated in the relevant legislation. When the retention period expires or the purpose of processing ceases to exist, your personal data is deleted, destroyed or anonymized.

9. Security Measures

As OsloSOFT, we take technical and administrative measures to ensure the security of your personal data. All necessary technical and administrative measures are taken to ensure an appropriate level of security against the risks of loss, unauthorized access, disclosure, alteration or misuse of your data.

10. Contact

You can contact us for your questions, requests and suggestions within the scope of KVKK: