Personal Data Protection Law (KVKK) Information Text
Privacy Policy on the Processing of Personal Data
As Buteksoft Teknoloji ve Bilişim Hizmetleri Ltd. Şti. ("Buteksoft" or the "Company"), we attach the utmost importance to the security of your personal data. With this awareness, we place great importance on processing and safeguarding all personal data belonging to individuals associated with our Company, including those who benefit from our products and services, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK").
In our capacity as the Data Controller, we process your personal data within the limits prescribed by applicable legislation and as explained below.
1. Collection, Processing, and Purposes of Processing Personal Data
Your personal data may vary depending on the products, services, and commercial activities provided by our Company and may be collected through automatic or non-automatic methods via our offices, dealers, website, social media platforms, and similar channels, either verbally, in writing, or electronically.
Your personal data may be processed and updated throughout your use of our products and services. Additionally, your personal data may be processed when:
-
You visit or use our website;
-
You visit our offices or premises;
-
You contact our Company;
-
You participate in training sessions, seminars, webinars, events, or other organizations conducted by our Company;
-
You request information regarding our products and services.
The personal data collected may be processed for the following purposes:
-
Carrying out the necessary operational activities by our business units to enable you to benefit from our products and services;
-
Customizing and recommending products and services according to your preferences, usage habits, and needs;
-
Ensuring the legal and commercial security of our Company and persons having a business relationship with our Company;
-
Conducting administrative operations related to communication activities;
-
Ensuring the physical security and supervision of Company premises;
-
Managing business partner, customer, supplier, and vendor evaluation processes;
-
Conducting legal compliance activities;
-
Performing financial and accounting operations;
-
Determining and implementing the Company's commercial and business strategies;
-
Conducting and managing the Company's human resources policies and processes.
Such processing activities are carried out in accordance with the personal data processing conditions and purposes specified under Articles 5 and 6 of the KVKK.
2. Transfer of Personal Data
Your collected personal data may be transferred to:
-
Our business partners;
-
Suppliers and service providers;
-
Shareholders and affiliated companies;
-
Legally authorized public institutions and authorities;
-
Legally authorized private entities;
for the purposes listed above and in accordance with Articles 8 and 9 of the KVKK.
Additionally, personal data may be transferred to:
-
Manufacturers and vendors for improving service quality, extending product warranty periods upon customer request, and preparing reports and outputs relating to events and activities;
-
Social media platforms, social media agencies, and media organizations for marketing, public relations, and promotional activities;
-
Travel agencies and related service providers located abroad for visa and travel arrangements carried out within the scope of campaigns, incentive programs, events, and business activities.
All transfers are carried out in compliance with applicable data protection legislation and the relevant provisions of the KVKK.
3. Method and Legal Basis for Collecting Personal Data
Your personal data is collected through verbal, written, and electronic means for the purposes stated above, in order to enable the lawful provision of products and services offered by our Company and to ensure that the Company's contractual and legal obligations are fulfilled completely and accurately.
The legal bases for processing personal data include:
-
Explicit consent where required;
-
Necessity for the performance of a contract;
-
Compliance with legal obligations;
-
Protection of legitimate interests of the Company;
-
Establishment, exercise, or protection of legal rights;
-
Other legal grounds provided under Articles 5 and 6 of the KVKK.
Personal data collected based on these legal grounds may be processed and transferred for the purposes specified in Sections 1 and 2 of this Notice.
4. Rights of Data Subjects Under Article 11 of the KVKK
As a data subject, you have the following rights under Article 11 of the KVKK:
-
To learn whether your personal data is being processed;
-
To request information regarding the processing of your personal data;
-
To learn the purpose of processing and whether personal data is used in accordance with that purpose;
-
To know the third parties to whom personal data is transferred domestically or abroad;
-
To request correction of incomplete or inaccurate personal data and request notification of such correction to third parties to whom the data has been transferred;
-
To request the deletion, destruction, or anonymization of personal data where the reasons requiring processing no longer exist and request notification of such action to third parties to whom the data has been transferred;
-
To object to any outcome arising against you through the exclusive analysis of processed data by automated systems;
-
To request compensation for damages suffered as a result of unlawful processing of personal data.
5. Exercising Your Rights
Pursuant to Article 13 of the KVKK, you may submit your requests regarding the rights listed above to our Company in writing or through other methods determined by the Personal Data Protection Board.
As no alternative method has currently been designated by the Board, applications must be submitted in writing.
To exercise your rights, you may submit a written request containing:
-
Information sufficient to identify your identity;
-
A clear explanation of the right you wish to exercise under Article 11 of the KVKK;
through one of the following methods:
In Person
Buteksoft Teknoloji ve Bilişim Hizmetleri Ltd. Şti.
29 Ekim Mah. Uğur Mumcu Bulvarı
Kar Plaza No:29 D:21
Nilüfer / Bursa / Türkiye
By Notarized Postal Mail
You may send a notarized written application to the address above.
Your application will be evaluated and finalized free of charge as soon as possible and no later than thirty (30) days from receipt. However, if the process requires additional costs, a fee may be charged in accordance with the tariff determined by the Turkish Personal Data Protection Board.