General Information and Clarification Text on the Processing of Personal Data

We would like to inform you about the Law No. 6698 on the Protection of Personal Data (KVKK), which was enacted in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to determine the obligations of real and legal persons who process personal data in the processing of personal data.

Our company BilimTimi brings the following explanations to the attention of our customers and third parties using our websites, in order to fulfill the obligation of disclosure in Article 10 of the Law on the Protection of Personal Data No. 6698.

First of all, information about both some terms expressed in the Law and our data processing processes to fulfill our obligations are presented below.

What is KVKK?

The Law on the Protection of Personal Data (hereinafter referred to as the Law) was adopted by the Turkish Grand National Assembly on 24.03.2016 and entered into force after being published in the Official Gazette dated 07.04.2016 and numbered 29677.

The law is based on the compatibility of all data processing persons and institutions within the framework of basic purposes such as ensuring the confidentiality of personal data, protecting it and preventing its unauthorized use. Our company, like all organizations, is obliged to comply with this Law and personal data processed in all processes of our company are within this scope.

What is Personal Data?

In Article 3/d of the Law on the Protection of Personal Data No. 6698, personal data is defined as any information relating to an identified or identifiable natural person.

Accordingly, all data or data sets that make a person identifiable directly or indirectly are considered personal data. Identifiable information such as name, surname, place/date of birth, phone number, CV, photo, voice recording, or directly related to the person can be given as an example.

What is Data Processing?

Any operation performed on personal data is considered as "data processing". Therefore, archiving, storage, modification, rearrangement, disclosure, transfer, analysis and classification of data are included in the scope of data processing.

Who is the Relevant Person / Data Owner?

One of the expressions frequently used in the law is "relevant person" or "data owner". Relevant person means the real person whose personal data is processed.

Who is the Data Controller?

The data controller is the natural or legal person who determines the purposes and methods of processing personal data and is responsible for the establishment and management of the data recording system. At this point, our company; becomes the Data Controller for the data of our customers, visitors and employees.

Who is the Data Processor?

Data processors are natural or legal persons who process data on behalf of the data controller. These persons may also be a separate natural or legal person authorized by the data controller to process personal data.

Terms of Data Processing

All data controllers have the right to process data only when the following conditions are met or the data subject gives explicit consent:

* Explicitly stipulated in laws,

* Being directly related to the establishment or performance of a contract,

* Fulfilling the legal obligation of the data controller,

* The person concerned has been made public by himself,

* Data processing is mandatory for the establishment, exercise or protection of a right,

* Legitimate interest of the data controller.

Fulfilling Data Subject Requests

The law gives the relevant persons the right to make a request regarding which personal data are processed in which processes and the current status of these data. As a company, we are obliged to respond to requests from data owners within 30 days.

In cases where your request is rejected, the response to your request is insufficient, or your request is not answered in due time; You have the right to lodge a complaint with the Board within thirty days from the date you learn about our firm's response, and in any case within sixty days from the date of application.

According to Article 13 of the Law on the Protection of Personal Data No. 6698, which regulates the "Application to the Data Controller", the data subject/data owner must submit their requests regarding the implementation of the Law to the data controller in writing. For this reason, in order for your request to be evaluated, you can send your identity documents and your petition containing your request in writing to our company, send it via a notary public or send it to info@bilimtimi.com with secure electronic signature.

The institutions and persons who are data controllers or process data are obliged by the Law to inform the data owners about the personal data they process.

Our clarification text regarding the personal data we process as BilimTimi is presented below.

Protection of Personal Data Clarification Text

As BilimTimi, we act as a data controller and take the necessary measures during the stages of storage, processing and transfer of your personal data in accordance with the Law on Protection of Personal Data No. 6698 (KVKK) and the principle of privacy and protection of fundamental rights and freedoms of individuals. We would like to inform you about these issues.

Collection of Personal Data and Legal Reason

BilimTimi's customers and/or customers' authorities, third party institutions and organizations that it receives services from as a complement to its business relations, any automatic and/or non-automatic written, verbal and electronic media, third parties and/or legal authorities. ; For the purposes listed below and the products/services we offer to be offered within the determined legal framework and to fulfill our contractual obligations. Your personal data collected through these methods can be processed and transferred for the purposes stated below, within the framework of the processing conditions of personal data and special quality personal data of KVKK.

Purpose of Processing Personal Data

BilimTimi processes and stores personal data and sensitive personal data that it considers necessary only in order to provide the best service and product it aims to provide, as well as the information it must obtain from its customers, its customers' officials or other third parties, to the extent permitted by legal regulations. and transmit. In this context, your personal data is collected by our relevant business units for the development of commercial activities within the scope of E-Object Licensing and Consultancy Services, E-Object Support Services, E-Transformation Solutions, Sectoral Ready Solutions and other management consultancy / software services carried out by our company, and execution of related business processes, planning and execution of business activities, follow-up, presenting the products and services you have in our company, providing general information about these products and communicating opportunities, contacting you about other products and services of our company, product sales, marketing and information Carrying out activities, planning these services, customer acquisition, customer satisfaction and acquisition, sharing the offers related to our services, increasing our service quality, making improvements for customer and sectoral needs. It can be processed within the scope of the reasons and purposes specified in the KVKK within the scope of the purpose of performing analysis, reporting, segmentation and modeling studies, and reporting and examinations deemed necessary within the scope of activities related to the information sector.

Transfer of Processed Personal Data

Your personal data other than your license information, directly/indirectly to our domestic/foreign affiliates, with program partner institutions and organizations that we cooperate with in order to carry out our activities, with domestic/foreign persons and institutions from which we receive data storage services in the cloud environment, and to our customers, with whom we have an agreement to send commercial electronic messages. It can be shared with domestic/foreign institutions, Interbank Card Center, and contracted banks.

BilimTimi keeps the records and documents related to the transactions it carries out with its customers for a certain period of time within the scope of legal regulations, and if you request your personal data to be deleted or destroyed or anonymized, this request can be fulfilled at the end of the period determined by the legal regulations; During this period, your personal data will not be processed and shared with third parties, except for obligations arising from national and international laws, regulations and contracts.

Protection of Your Personal Data

For BilimTimi, the protection of your personal data is of utmost importance. For this reason, extensive security measures are taken to protect your personal data. All kinds of technical and administrative measures are taken by BilimTimi to prevent unauthorized access to your personal data, to disclose your personal data, to prevent it from being changed or destroyed in an untrue way.

In the event that your personal data is damaged as a result of malicious attempts despite the security measures taken by our company and it falls into the hands of third parties who are not in good faith, this situation will be reported to the data owner and the Personal Data Protection Board without delay.

Rights of the Person whose Personal Data is Processed

In accordance with the provisions of the KVKK, you can use the following rights by applying to BilimTimi:

* Learning whether personal data is processed,

* Requesting information on personal data if it has been processed,

* Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

* Knowing the third parties to whom personal data is transferred at home or abroad,

* Requesting correction of personal data if it is incomplete or incorrectly processed,

* Requesting the deletion or destruction of personal data,

* Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,

Demands submitted within this scope will be finalized by BilimTimi free of charge within thirty days at the latest. However, if a fee is foreseen by the Personal Data Protection Board, this fee may be charged.

If you want to contact us for your requests;

If you want to contact us, give feedback or ask your questions within the scope of KVKK, you can send your petition containing your identity documents and your request in writing to our company, send it via a notary public or send it to info@bilimtimi.com with secure electronic signature.

In this context, we would like to remind you that your written applications on the subject can be accepted following the identity verification to be made by us.