Privacy Notice

1. DATA CONTROLLER

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller for the personal data processed through the yengech.com website (the "Site") is Yengech Yazılım Teknolojileri Limited Şirketi (the "Company").

• Address: [TO BE COMPLETED: the company's registered address]
• MERSIS No: [TO BE COMPLETED]
• E-mail: [email protected]

This notice covers the personal data processed when you visit the Site and when you contact us through the contact form on the Site.

2. PERSONAL DATA PROCESSED

• Identity and Contact Data: The full name and e-mail address you share in the contact form and, if you choose to share it, your company name.
• Request Data: The content of the message you write in the contact form and the language in which you fill in the form (Turkish or English). Any other information you choose to share in your message is also covered; please do not include special categories of personal data in your message.
• Transaction Security Data: Your IP address and technical information about your browser and device, processed during the automatic security check that protects the form from abuse; the IP address and browser information processed by the infrastructure hosting the Site when you access it.

The Site does not store the information you share in the contact form in a database on its own servers; when you send the form, your information is forwarded by e-mail to the Company's corporate mailbox.

3. METHOD OF COLLECTION

Your personal data are collected electronically, partly by automated means, when you fill in the contact form on the Site and while you visit the Site.

4. PURPOSES AND LEGAL GROUNDS OF PROCESSING

Your personal data are processed on the following legal grounds set out in Article 5 of the KVKK:

• KVKK art. 5/2-c (processing directly related to the conclusion or performance of a contract): Assessing your request, replying to you, and carrying out meetings and offer processes for your needs.
• KVKK art. 5/2-f (the legitimate interest of the data controller, provided that it does not harm your fundamental rights and freedoms): Protecting the form and the Site against automated and malicious use, and providing the Site securely and without interruption.
• KVKK art. 5/2-e (establishing, exercising or protecting a right): Where necessary, using the correspondence as evidence in possible legal disputes.

The checkbox in the contact form confirms that you have read this notice; it is not a declaration of explicit consent.

5. TRANSFER OF PERSONAL DATA

Your personal data are transferred, to the extent required by the purposes above and in accordance with the conditions in Articles 8 and 9 of the KVKK, to the following service providers, whose servers may be located abroad:

• Cloudflare, Inc.: Hosting and serving the Site, and running the automatic security check on the contact form (Cloudflare Turnstile).
• Zoho Corporation: Forwarding the form content by e-mail (ZeptoMail) and the Company's corporate e-mail service (Zoho Mail).

Your personal data may also be transferred to authorized public institutions upon request to fulfil legal obligations, and to legal advisers to protect rights in legal disputes.

6. RETENTION PERIOD

The information you send through the contact form is kept for as long as needed to conclude your request. If your request does not lead to a contractual relationship, your information is deleted at the end of [TO BE COMPLETED: retention period]. If a contractual relationship is established, the records of that relationship are kept for the periods required by the applicable legislation. When these periods expire, your personal data are deleted, destroyed or anonymized in accordance with the KVKK.

7. YOUR RIGHTS

Under Article 11 of the KVKK, by applying to the Company you have the right to:

• learn whether your personal data are processed,
• request information if your personal data have been processed,
• learn the purpose of the processing and whether the data are used in line with that purpose,
• know the third parties in Turkey or abroad to whom your personal data are transferred,
• request the correction of your personal data if they are incomplete or inaccurate,
• request the deletion or destruction of your personal data under the conditions in Article 7 of the KVKK,
• request that the correction, deletion or destruction be notified to the third parties to whom your personal data have been transferred,
• object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• claim compensation for damages arising from the unlawful processing of your personal data.

You can send your application by e-mail to [email protected] or in writing to the address above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application is concluded as soon as possible depending on its nature, and within thirty days at the latest. Applications are free of charge as a rule; if the process requires an additional cost, the fee set in the tariff of the Personal Data Protection Board may be charged.

The Turkish version of this notice prevails.