1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by Codevisor Bilişim Çözümleri Ltd. Şti. (“Codevisor” or the “Company”) as data controller, within the scope described below.

2. Personal Data We Process

Depending on the nature of your relationship with us, the following categories of data may be processed:

• Identity data: first name, last name, and where relevant details of the organization you represent.
• Contact data: email address, phone number, address.
• Customer transaction data: content of your requests and messages, proposal, contract and project information.
• Transaction security data: IP address, log records, cookie and similar technical data.
• Marketing data: newsletter and communication preferences, subject to your explicit consent.
• CV and application data: if you apply for a role, your education, work experience and information contained in your application documents.

3. Purposes of Processing

• Responding to your contact requests, information requests and applications,
• Preparing proposals for our services and managing contract processes,
• Delivering services and managing invoicing, collection and accounting processes,
• Ensuring the security and functionality of the website, including settings such as language preference,
• Fulfilling obligations arising from applicable legislation,
• Sending commercial electronic messages and promotions, subject to your explicit consent,
• Evaluating job applications and carrying out recruitment processes.

4. Legal Grounds for Processing

Your personal data is processed under Article 5/2 of the KVKK on the grounds that processing is directly related to the conclusion or performance of a contract, is necessary for the Company to fulfil a legal obligation, is necessary for the establishment, exercise or protection of a right, or is necessary for the legitimate interests of the Company provided that it does not harm your fundamental rights and freedoms. Where these grounds do not apply, processing is based on your explicit consent (Article 5/1). Special categories of personal data are processed only under the conditions set out in Article 6 of the KVKK.

5. Transfer of Personal Data

Your personal data may be transferred, solely for the purposes above, to our business partners and suppliers (including hosting, infrastructure, email, security and analytics providers), and — upon request — to authorized public institutions and legally authorized private persons, in accordance with Articles 8 and 9 of the KVKK. Where service providers located abroad are used, transfers are carried out in line with the conditions required by the KVKK (explicit consent, an undertaking, or an adequacy decision).

6. Method of Collection

Your personal data is collected through automated or partly automated means such as website contact forms, email, phone calls, contracts and cookies.

7. Retention Period

Your personal data is retained for as long as the processing purposes require and for the statutory limitation and retention periods set out in the relevant legislation. At the end of these periods your data is deleted, destroyed or anonymized.

8. Your Rights as a Data Subject (KVKK Art. 11)

Under Article 11 of the KVKK, by applying to the Company you have the right to:

• learn whether your personal data is being processed and request information if it is,
• learn the purpose of processing and whether the data is used in line with that purpose,
• know the third parties to whom your data is transferred domestically or abroad,
• request correction if your data is incomplete or inaccurate,
• request deletion or destruction of your data under the conditions in Article 7,
• request that correction, deletion and destruction be notified to third parties to whom the data was transferred,
• object to a result against you arising solely from automated analysis of your data,
• request compensation if you suffer damage due to unlawful processing.

9. How to Apply

You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to Yenişehir Mah. Ankara Cad. 360 Office No:405 İç Kapı No:16 Pendik / İstanbul or via info@codevisor.com.tr. Your application must include information and documents verifying your identity. Requests are concluded free of charge as soon as possible and within 30 days at the latest; where the process incurs an additional cost, the tariff set by the Personal Data Protection Board may apply.

10. Cookies

Our website uses cookies that are strictly necessary for the site to function, as well as functional cookies to remember your preferences (for example, language selection). You can manage or delete cookies from your browser settings; blocking strictly necessary cookies may cause parts of the site to stop working.

11. Changes

This Privacy Notice may be updated in line with changes in legislation or our processes. The current version is always published on this page.