Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data will be processed by our Company, in its capacity as Data Controller and in connection with its business purposes, by being used, recorded, stored, updated, transferred and/or classified within the framework described below. In this context, in accordance with the Law and the Regulations enacted to protect the fundamental rights and freedoms of individuals, above all the privacy of private life, and to protect personal data, our Company takes all technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of your personal data, to prevent unlawful access to it and to ensure its safekeeping.
This notice is addressed to our Company's employees, to persons who have shared their details with our Company in order to be contacted, and to all natural persons whose personal data are processed by our Company.
The personal data processed in our capacity as data controller include, without being limited to, the following: name, surname, Turkish ID number, address, telephone number, e-mail address, signature, physical premises/security camera recordings, call centre/service quality voice recordings, bank account number and cookie records.
Purposes and legal grounds for processing personal data
The personal data you share with us will be processed for the purposes of:
- carrying out the work necessary to enable you and/or the institutions and organisations you represent to benefit from the products and services offered by our Company, including but not limited to determining and implementing our Company's commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities,
- conducting the administrative operations related to the communications carried out by our Company,
- ensuring the physical security and supervision of the locations used by our Company,
- establishing relationships with business partners/customers/suppliers (their authorised representatives or employees),
- fulfilling contractual requirements and ensuring financial reconciliation for the products and services offered together with our business partners, suppliers or other third parties,
- implementing our Company's human resources policies,
- calls to our Company's call centre or use of our website, and/or
- participation in training sessions, seminars or events organised by our Company.
Method of collecting and storing personal data
The personal data you share with our Company may be collected verbally, in writing or electronically, by automated or non-automated means, through our offices, branches, call centre, website, social media channels, mobile applications and similar channels. Your personal data will be stored in electronic and/or physical media. Business processes have been designed and technical security infrastructure has been developed to ensure that the personal data obtained and stored by our Company are not exposed to unauthorised access, manipulation, loss or damage in the media where they are stored.
Your personal data will be processed with all necessary information security measures in place, provided that they are not used outside the purposes and scope notified to you, and will be stored and processed for the statutory retention period or, where no such period is prescribed, for as long as the purpose of processing requires. When this period ends, your personal data will be removed from our Company's data flows by being erased, destroyed or anonymised.
Transfer of personal data
Within the scope of the Law and other legislation, and for the purposes described, your personal data may be transferred to:
- Türk Telekomünikasyon A.Ş. and the companies of the Türk Telekomünikasyon group,
- the companies and representatives we have authorised to act on behalf and for the account of our Company,
- regulatory and supervisory authorities, and public institutions or organisations expressly authorised by the laws to which they are subject to request your personal data,
- business partners, supplier and contractor companies, banks, credit risk and financial institutions and other natural or legal persons within the scope of the stated purposes,
- tax and similar advisers, persons, institutions and organisations required in connection with legal proceedings, and third parties from whom we obtain advice, including auditors, and, without being limited to these, business partners, third-party service providers and authorised persons and organisations in Türkiye and abroad, for the purposes stated above.
Your rights under Article 11 of the KVKK
By applying to our Company, you have the right to:
- learn whether your personal data are being processed,
- request information if they have been processed,
- learn the purpose of the processing and whether they are used in line with that purpose,
- know the third parties in Türkiye or abroad to whom they have been transferred,
- request their correction if they have been processed incompletely or inaccurately,
- request their erasure or destruction under the conditions set out in Article 7 of the KVKK,
- request that the operations carried out under items (e) and (f) above be notified to the third parties to whom they have been transferred,
- object to any result to your detriment arising from their analysis exclusively by automated systems,
- claim compensation for damage if you suffer loss due to their unlawful processing.
How to apply
Pursuant to Article 13(1) of the KVKK, you may submit your request concerning the exercise of the rights listed above to our Company in writing or by other methods determined by the Personal Data Protection Board.
To exercise the rights listed above, you may hand-deliver your written request together with the information necessary to verify your identity, send it through a notary public or by other methods determined by the Personal Data Protection Board, or send it to info@evvyapi.com with a secure electronic signature.