Privacy Policy

Key Yazılım Çözümleri A.Ş. ("Company", "Data Controller") places utmost importance on the security and confidentiality of your personal data. In this regard, with respect to the personal data that we have requested from you and that you have shared with us, we present the following information as the "Data Controller" under Law No. 6698 on the Protection of Personal Data ("Data Protection Law" or "KVKK") to fulfill the disclosure obligation arising from Article 10 of the Law.

Which Personal Data of Yours Will Be Processed

Your personal data is processed through automatic or non-automatic methods via the internet, social media, electronic mail, and in oral, written, or electronic form. As a result of your interest in or use of our services and products, the following personal data that you have provided to us and/or that may be updated (not limited to those listed below) may be processed:

• Your name, surname, date of birth, and other data contained in your identity document,
• Your contact information such as phone number, email address, and mailing address,
• Behavioral and digital footprint information obtained through cookies when you use our websites,
• Your images obtained through closed-circuit camera recording systems during your visits to our premises,
• Visual and audio data obtained within the scope of promotional events, workshops, and similar activities,
• If you are our business partner, financial data such as bank account numbers, IBAN, and billing information for contract performance,
• Professional data obtained in connection with contract performance such as business license, professional association registration, and signature samples and signatures provided as necessary,
• If you are an employee of our Company or work for an employer with whom our Company has a business partnership: educational data, your employment contract, aptitude for work and performance data, health information, supplementary health insurance and financing data, Social Security Institution information, national ID number, visa/passport data, vehicle information, and other personal data that may be processed within the scope of your employment contract.

Purposes and Legal Basis for Processing Personal Data

Your personal data is processed by our Company to carry out our commercial activities and related business processes, management and conduct of our relations with business partners and/or suppliers, technical management of our websites, customer management and monitoring of requests/complaints, conducting customer satisfaction surveys and follow-up of questions sent to us, carrying out necessary work by our business units to benefit you from products and services offered by our Company, planning and implementation of sales, marketing, and post-sales processes for products and/or services, providing information about the content of our Company's products and services, customer satisfaction, customer complaint and request management, customer relations, conducting meetings, workshops, training and other activities within our Company, and conducting and ensuring the security of legal and commercial relations with our Company and individuals in business relations with our Company.

Processing is carried out based on the legal grounds provided in Article 5 of the Data Protection Law, namely that "processing is necessary for the data controller to fulfill its legal obligation," "processing is necessary for the data controller's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the relevant person," and "processing is necessary for the performance or conclusion of a contract," in accordance with the fundamental principles of data protection law.

Transfer of Personal Data

Your collected personal data may be shared with official institutions and organizations within the country, law enforcement agencies, courts and execution offices, domestic third parties with whom we have business relations, our affiliates, our customers, service provider companies/suppliers, our business partners, our company shareholders and board members, domestic institutions and organizations from which we receive data storage and retention services, and individuals and organizations with whom we work contractually to conduct our activities. Your personal data is not transferred abroad.

Methods of Processing Personal Data

Personal data is collected through verbal, written, or electronic means via the completion and submission of application forms, employment contracts and other commercial contracts, customer satisfaction forms, supplier evaluation forms and other forms and documents, submission of curricula vitae by relevant individuals, electronic monitoring and physical access control systems at the workplace, information systems and electronic devices, labor exchange institutions and private employment agencies, third parties, online cookies, tracking cookies created by third parties, site usage measurement systems, and other documents declared by the relevant person.

Storage of Personal Data

Your personal data will be deleted, destroyed, or anonymized by us using a method appropriate to your personal data type in accordance with the Data Protection Law and applicable regulations when our purpose for processing ceases and/or when the statute of limitations periods during which we are required by law not to process your data have expired.

Security of Your Personal Data

Our Company takes all necessary technological possibilities and both technical and administrative measures to prevent unlawful processing of your personal data and to ensure that your personal data is maintained with the required level of security.

Your Legal Rights as the Data Subject

Pursuant to Article 11 of the Data Protection Law, you have the right to personally request from us, provided that you prove your identity, regarding your personal data:

• To learn whether our Company processes personal data about you, and if so, to request information about this,
• To learn the purpose of processing your personal data and whether it is used for its intended purpose,
• To learn whether your personal data is transferred domestically or abroad and to whom it has been transferred

You also have the right to request the correction of your incorrect or incomplete personal data from our Company and to inform the recipients to which your data has been or may have been transferred.

You may request the destruction of your personal data (deletion, erasure, or anonymization) from our Company within the conditions provided for in Article 7 of the Data Protection Law. Your requests made in your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request.

How to Exercise Your Rights

You can submit requests regarding your aforementioned rights by completing the request form and submitting it to the Data Controller. Your application must contain identity and address information and be accompanied by documents proving your identity.

Response Time for Your Requests

Your requests regarding your personal data rights will be evaluated and answered within thirty days at the latest from the date they reach us. However, if the processing requires additional costs, our Company will charge the fee determined by the Personal Data Protection Board.