INFORMATION NOTICE WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA
This Information Notice has been prepared by İŞTE Büyüyelim Teknoloji ve Finans Hizmetleri (the "Company" or the "Data Controller") pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
1. Identity of the Data Controller
| Trade Name | İŞTE Büyüyelim Teknoloji ve Finans Hizmetleri |
| Website | www.istebuyuyelim.com |
| [email protected] | |
| Address | Güzelyalı Mah. T.Özal Bulvarı 81077 Sk. No:2 Dostlar Apt. K:1 D:1 Çukurova/Adana |
| Tax ID / National ID | 8010587431 |
2. Processed Personal Data and Their Categories
Our Company processes your personal data within the categories listed below:
| Category | Data Types |
|---|---|
| Identity Data | First name, last name |
| Contact Data | Phone number, email address, company name, title/position |
| Transaction Security Data | IP address, cookie data, browser information, session information |
| Customer Transaction Data | Demo request details, call-back requests, support requests, contact form contents |
| Legal Transaction Data | Contract details, business correspondence, invoice details |
| Marketing Data | Email and SMS communication preferences based on explicit consent |
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Responding to demo and information requests regarding İŞTE Nakit, İŞTE CRM, İŞTE Web, and İŞTE Software products
- Evaluating applications and requests for financial consultancy services (Financial Reporting, Company Valuation, Risk Management, Corporate Finance, etc.)
- Responding to call-back and contact form requests
- Establishing, managing, and performing service agreements
- Conducting billing and accounting processes
- Providing technical support and customer services
- Ensuring website security and managing technical infrastructure
- Fulfilling legal obligations
- Carrying out marketing communications regarding products and services in line with your explicit consent
- Conducting business development and statistical analysis activities
4. Legal Grounds for Processing Personal Data
Your personal data is processed pursuant to Article 5 of KVKK on the following legal grounds:
- Article 5/2-a: Explicitly stipulated by laws (tax legislation, commercial law obligations)
- Article 5/2-c: Being directly related to the establishment or performance of a contract
- Article 5/2-ç: Fulfillment of the data controller’s legal obligation
- Article 5/2-f: Processing being mandatory for the legitimate interests of the data controller (website security, statistical analyses)
- Article 5/1: Explicit consent of the data subject (marketing communications)
5. Parties to Whom Personal Data Is Transferred and Purposes of Transfer
Your personal data may be shared with the parties below, limited to the stated purposes:
| Recipient Group | Purpose of Transfer | Legal Basis |
|---|---|---|
| Cloud Infrastructure and Hosting Providers | Operating the website and application infrastructure | KVKK Art. 5/2-f, Art. 9 |
| Email Service Providers | Corporate email and sending automated notifications | KVKK Art. 5/2-c |
| Accounting and Financial Advisory Firms | Fulfillment of statutory accounting and tax obligations | KVKK Art. 5/2-ç |
| Authorized Public Institutions and Organizations | Legal obligations and official requests | KVKK Art. 5/2-a, Art. 5/2-ç |
| Analytics Service Providers (Google Analytics, etc.) | Website traffic and user behavior analysis | KVKK Art. 5/1 (explicit consent) or Art. 5/2-f |
International Transfers: International transfers are carried out only in accordance with Article 9 of KVKK and the procedures and principles determined by the Personal Data Protection Board ("KVKK"), either to countries providing an adequate level of protection or subject to obtaining your explicit consent.
6. Methods of Collecting Personal Data
Your personal data is collected through the following channels:
- Website Forms: Contact form, demo request form, call request form
- Email: Correspondence sent to us
- Phone: Voice communication channels
- Cookies and Technical Methods: Data collected automatically during website visits
- Contract Processes: During the establishment of service agreements
7. Retention Periods of Personal Data
| Data Category | Retention Period |
|---|---|
| Contact and Demo Request Data | 2 years from the conclusion of the request |
| Contract and Customer Data | 10 years following the termination of the contract (as per the Turkish Commercial Code) |
| Invoices and Financial Records | 5 years (as per the Tax Procedure Law) |
| Logs and Transaction Security Data | 2 years (as per Law No. 5651) |
| Marketing Communication Data | Until consent is withdrawn; if consent is withdrawn, 3 years |
| Cookie Data | Varies by cookie type, up to a maximum of 2 years |
Upon expiration of the retention periods or if the purpose of processing ceases to exist, your personal data is deleted, destroyed, or anonymized.
8. Your Rights as a Data Subject
Pursuant to Article 11 of KVKK, you have the following rights:
- a) To learn whether your personal data is processed
- b) To request information if it has been processed
- c) To learn the purpose of processing and whether it is used in accordance with that purpose
- d) To know the third parties to whom it is transferred domestically or abroad
- e) To request correction if it is incomplete or inaccurate
- f) To request deletion or destruction within the framework of Article 7 of KVKK
- g) To request notification of the transactions carried out pursuant to subparagraphs (d) and (e) to third parties to whom the data is transferred
- h) To object to the occurrence of a result against you by means of analysis exclusively through automated systems
- i) To request compensation for damages in case you suffer damage due to unlawful processing
Application Method
You may submit your applications regarding your rights through the following methods:
- Email: [email protected] (via registered email or with secure electronic signature)
- Written Application: By a wet-signed petition delivered to the company address in person or via a notary public
Your applications will be concluded within a maximum of 30 days depending on the nature of your request. In case your request is rejected, an insufficient response is provided, or you do not receive a response in due time, your right to file a complaint with the Personal Data Protection Authority ("KVKK") is reserved.
9. Changes
Our Company reserves the right to update this Information Notice in line with applicable legislation and decisions of the Personal Data Protection Authority. The current text will always be published at www.istebuyuyelim.com/kvkk-hakkinda-bilgilendirme/.
Last Updated: February 2026