Data Protection Notice

Data Protection Notice under the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and the EU General Data Protection Regulation (GDPR)

1. Data Controller

As WiseLIMS, we process your personal data in the capacity of data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Where applicable, we also act as a data controller within the meaning of the EU General Data Protection Regulation ("GDPR").

2. Personal Data We Process

The following categories of personal data may be processed:

• Identity Information: Name, surname, national identification number
• Contact Information: Email address, phone number, address
• Professional Information: Company name, job title, department
• Transaction Security Information: IP address, log records, cookies
• Financial Information: Billing details, payment records

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Providing and maintaining our services
• Managing contractual processes
• Customer relationship management
• Billing and accounting operations
• Providing technical support
• Fulfilling legal obligations
• Managing information security processes
• Conducting communication activities

4. Legal Basis for Processing

Your personal data is processed based on the following legal grounds as specified in Articles 5 and 6 of the KVKK, and Article 6 of the GDPR:

• Your explicit consent
• Necessity for the performance or establishment of a contract
• Compliance with a legal obligation
• Necessity for our legitimate interests

5. Data Transfers

Your personal data may be transferred, limited to the purposes stated above, to:

• Our business partners and service providers
• Authorized public institutions and organizations
• Cloud service providers

In the event of cross-border data transfers, necessary safeguards are implemented in accordance with Article 9 of the KVKK and Chapter V of the GDPR, including standard contractual clauses and adequacy decisions where applicable.

6. Retention Period

Your personal data is retained for as long as necessary to fulfill the processing purposes and in compliance with our legal retention obligations.

7. Your Rights

Under Article 11 of the KVKK and Articles 15-22 of the GDPR, you have the following rights:

• To learn whether your personal data is being processed
• To request information about the processing if your data has been processed
• To learn the purpose of processing and whether your data is used in accordance with its purpose
• To know the third parties to whom your data has been transferred domestically or abroad
• To request rectification if your data has been processed incompletely or inaccurately
• To request erasure or destruction of your data under the conditions set forth in Article 7 of the KVKK
• To request that rectification, erasure, or destruction operations are notified to third parties to whom your data has been transferred
• To object to any result that arises against you through the analysis of processed data exclusively by automated systems
• To claim compensation for damages arising from the unlawful processing of your data

8. How to Submit a Request

You may exercise your rights by contacting us through the following channels:

• Email: [email protected]
• Mail: [Company Address]

Your requests will be processed free of charge within the shortest possible time and no later than thirty (30) days, depending on the nature of the request.

9. Changes

This data protection notice may be updated in line with legal regulations or changes in company policies. The current version will be published on our website.