Privacy Notice for Personal Data Processing

1. Data controller

For the purposes of Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Yeniçağ Yazılım ve Danışmanlık Ltd. Şti., headquartered at Teknopark İzmir, Building A2, Office 17, IZTECH Campus, Urla · İzmir, Türkiye.

2. Personal data processed

Depending on how the contact form is used, the following categories of personal data may be processed:

• Identity data: full name,
• Contact data: email address and optional phone number,
• Professional/organizational data: company or institution name, role/title and organization type,
• Request data: solution areas of interest, request type and information entered in the free-text field,
• Security data: IP address and security verification records used to protect the form against misuse and automated submissions.

3. Purposes of processing

Personal data is processed to receive and respond to demo, project, support, partnership or general contact requests; route requests to the relevant team or workflow; manage pre-service communication; and protect the form against spam, abuse and security threats. This form is not used to obtain consent for marketing newsletters or commercial electronic communications.

4. Collection method and legal basis

Data is collected electronically and directly from the individual when the web form is submitted. Depending on the nature of the request, processing may rely on the legal grounds set out in Article 5 of KVKK, including processing that is directly necessary for establishing or performing a contract and/or processing necessary for the legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed. Technical data used to secure the form is processed for legitimate interests related to preventing abuse and protecting information systems.

5. Transfers of personal data

To the extent necessary and proportionate, personal data may be shared with authorized company personnel and with IT, hosting, security and email infrastructure providers used to operate the service and respond to requests.

If the website or prototype infrastructure uses cloud services located outside Türkiye, form data may technically be processed or transferred abroad. Where an international transfer occurs, the requirements and appropriate safeguards under Article 9 of KVKK must be applied.

6. Retention

Personal data is retained for the period necessary to resolve the contact request and, where applicable, for mandatory retention periods arising from law. When the purpose and legal basis for retention cease to exist, applicable deletion, destruction or anonymization processes are applied.

7. Your rights

Under Article 11 of KVKK, you have rights including learning whether your personal data is processed, requesting information about processing, learning the purpose of processing and whether data is used in accordance with that purpose, learning third parties to whom data is transferred, requesting correction of incomplete or inaccurate data, and requesting deletion or destruction where the legal conditions are met.

Requests may be submitted to the data controller at the company address stated above in accordance with KVKK and the applicable procedures for data subject applications.