Privacy notice

How Basefy processes personal data under Turkish Personal Data Protection Law No. 6698 (KVKK).

As BASEFY Bilişim Hizmetleri A.Ş., in our capacity as "Data Controller", we take the utmost care to keep your personal data secure and to process it lawfully. With this in mind, we attach great importance to processing and protecting the data of our customers, business partners, employees and other third parties whose data we process in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK"). The protection of personal data is also a constitutional right and a principle our company follows closely. Aware of this responsibility, and as "Data Controller" as defined in Law No. 6698, we process your personal data as described below and within the limits set by the legislation.

HOW WE PROCESS YOUR PERSONAL DATA

We process your personal data through our website and/or mobile applications in order to update our customer information, database and records; record addresses and other information needed for communication; collect payments; contact you; provide the necessary information; exchange information about our programmes; prepare all records and documents that form the basis of processing in electronic (internet, mobile, etc.) or paper form; provide information to public officials on request and as required by law in matters of public security; increase customer satisfaction and conduct surveys electronically and/or physically; inform our customers about our services; assess customer complaints and suggestions and serve you through this channel; fulfil our legal obligations and exercise our rights under the legislation in force; and prevent fraud and other illegal activities. We process it within the conditions and purposes for processing personal data set out in Articles 5 and 6 of Law No. 6698.

TO WHOM AND FOR WHAT PURPOSE WE TRANSFER PROCESSED PERSONAL DATA

Your personal data may be shared, directly or indirectly, with our business partners; the website and social media consultants we work with to carry out our activities; printing and courier companies; the people and institutions from whom we obtain cloud storage services; the organisations we contract with for infrastructure; the institutions we have agreements with in order to serve you better; and other third parties and relevant business partners, within the conditions and purposes for processing personal data set out in Articles 8 and 9 of Law No. 6698.

BY WHICH METHOD AND ON WHICH LEGAL GROUNDS WE PROCESS PERSONAL DATA

We obtain most of the personal data we process from the information you give us. The personal data we process consists of information such as application forms and references, contracts and amendments, contact details, the information our employees' payroll requires, and family or next-of-kin details for emergencies. We categorise this information as "Identity Information, Contact Information, Personnel Information, Legal Transaction Information, Financial Information, Transaction Security Information, Health and Other Special Category Information".

Your personal data is collected by our company through technical and procedural methods carried out across different channels, such as the website and physical channels, on the legal grounds that arise from legislation, contracts, requests and the rules of good faith applicable to carrying out our activities. Personal data collected on these legal grounds may be processed and transferred within the conditions and purposes set out in Articles 5 and 6 of Law No. 6698 and for the purposes stated in this notice.

HOW WE PROTECT YOUR PERSONAL DATA

We apply a range of security measures to protect your personal data against unauthorised access, use and disclosure. These follow generally accepted technical and organisational measures as appropriate security standards, such as access controls, passwords and regular security assessments.

HOW LONG WE KEEP YOUR PERSONAL DATA

We will keep your personal data for as long as necessary to fulfil the purposes stated in this notice, unless a shorter or longer retention period is required or permitted under applicable law. Accordingly, we base retention on the periods set out in law, in particular statutory limitation periods, and otherwise on the periods deemed necessary for processing the data.

COOKIES AND VISIT STATISTICS

This site uses Google Analytics 4 (Google Ireland Limited) cookies only if you consent by choosing "Accept" in the cookie notice. These cookies help us understand how the site is used (pages visited, visit duration, device and browser type, approximate location); they are not used for advertising or personalisation. If you do not consent, Google Analytics is not loaded and the site works the same. You can change your choice at any time with the "Cookie settings" link at the bottom of the page; withdrawing consent deletes these cookies.

Information you send through the contact forms is delivered as an email to Basefy's Google Workspace mailbox so that we can reply to your request, and is not stored on the site.

This English text is a translation for convenience. The Turkish version of this notice prevails.