The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Some parts of the KVKK came into force on the date of publication, while others took effect on October 7, 2016.

Information as a Data Controller As IDEASOFT, whose detailed corporate information is published below, and as a Data Controller under KVKK No. 6698, your personal data will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by legislation, classified, and processed in the ways enumerated in KVKK as explained on this page.

How Your Personal Data May Be Processed Under KVKK No. 6698, the personal data you share with CIS KARKONT INSPECTION CONSULTANCY AND CERTIFICATION TRADE LTD. CO. (hereinafter referred to as CIS KARKONT) may be obtained wholly or partially automatically or through non-automated means, as part of any data recording system. It may be recorded, stored, modified, reorganized, and subjected to all kinds of processing. Any operation performed on data under KVKK is considered “processing of personal data.”

Purposes and Legal Grounds for Processing Your Personal Data The personal data you share may be processed for the following purposes:

• To fulfill the requirements of the services we provide to our members in accordance with the contract and technology, and to improve our products and services;
• To record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on the Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, and other relevant regulations;
• To arrange all records and documents necessary for banking and electronic payment systems, electronic contracts, or transactions conducted in paper format;
• To comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;
• To provide information to public prosecutors, courts, and relevant public officials on public security and legal disputes upon request and in accordance with the legislation.

Your personal data will be processed in compliance with KVKK No. 6698 and related secondary regulations.

Information on Third Parties or Organizations to Which Your Personal Data May Be Transferred For the above-mentioned purposes, your personal data shared with CIS KARKONT may be transferred to:

• Our main shareholders,
• Our domestic and international affiliates,
• Service providers, business partners, program partner organizations, and third-party institutions related to the services provided,
• Domestic and international institutions and other third parties.

Methods of Collecting Personal Data Your personal data may be collected through:

• Forms on the XX website, including details such as name, surname, national ID number, address, phone, business or personal email;
• Preferences made on pages accessed with a username and password;
• IP records of transactions, browser-generated cookie data, browsing duration and details, location data;
• Data obtained from social media platforms (Facebook, Twitter, Google, Instagram, etc.), public databases, and indirect sources.

Personal Data Obtained Before KVKK Came into Force Personal data legally obtained before April 7, 2016, through membership, electronic communication consent, product/service purchases, or other lawful means, are also processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of Personal Data Abroad Your personal data, collected by any of the above methods and processed within Turkey or for storage abroad, may be transferred to service providers abroad accredited by the Personal Data Protection Board and providing sufficient protection for personal data, in line with KVKK and contractual purposes.

Storage and Protection of Personal Data Your personal data will be kept confidential in CIS KARKONT’s database and systems in compliance with Article 12 of KVKK and will not be shared with third parties except as required by legal obligations and the provisions stated in this document.

CIS KARKONT is obliged to take necessary software (hashing, encryption, transaction logs, access management) and physical security measures to prevent unauthorized access to personal data. If personal data is obtained unlawfully by others, CIS KARKONT will notify the Personal Data Protection Board immediately in accordance with legal regulations.

Keeping Personal Data Accurate and Up-to-Date Under Article 4 of KVKK, CIS KARKONT is responsible for keeping personal data accurate and up-to-date. Members must provide accurate and up-to-date information or update their details via the website to comply with legal obligations.

Rights of Personal Data Owners Under KVKK No. 6698 As of October 7, 2016, personal data owners have the following rights under Article 11 of KVKK:

1. To learn whether their personal data is processed,
2. To request information if their personal data has been processed,
3. To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
4. To know third parties to whom personal data has been transferred domestically or abroad,
5. To request correction if personal data is processed incompletely or incorrectly,
6. To request deletion or destruction of personal data within the conditions set forth in Article 7 of KVKK,
7. To request notification of corrections, deletions, or destruction to third parties to whom personal data has been transferred,
8. To object to results against them obtained through automated processing of personal data,
9. To demand compensation if they suffer damage due to unlawful processing of personal data.

CIS KARKONT, located at 5003 Sk No:2/2 D:406 Çınar Mh Bornova-İzmir, is the Data Controller under KVKK.

The Data Controller Representative appointed by CIS KARKONT will be announced in the Data Controllers Registry once the legal infrastructure is established.

Personal Data Owners can send their questions, opinions, or requests via:

Email: info@cis-karkont.com
Phone: +90 232 463 32 72
Fax: +90 232 463 34 45

CIS KARKONT will respond to requests within 30 days, free of charge in principle. However, if the process incurs a cost, CIS KARKONT reserves the right to charge fees based on the tariff determined by the Personal Data Protection Board under Article 13 of KVKK.