Privacy Notice under the Personal Data Protection Law

Last updated: May 2026

As Şimşek Software Bilişim Hizmetleri, we have prepared this notice in order to fulfill our disclosure obligation in our capacity as the data controller, in accordance with the Personal Data Protection Law No. 6698 ("KVKK").

1. Data Controller

Şimşek Software Bilişim Hizmetleri
Contact: kvkk@simseksoftware.com

2. Personal Data Processed

In the course of using our services or contacting us, personal data in the following categories are processed:

• Identity Data: First name, last name, title
• Contact Data: Email address, phone number, company name
• Technical Data: IP address, browser type, operating system, date and time of visit, page view information
• Transaction Data: Quote and project requests, contact form content

3. Purposes of Processing Personal Data

Your personal data are processed for the following purposes:

• Managing service quotes and project processes
• Responding to communication requests
• Establishing and performing the contractual relationship
• Fulfilling legal obligations
• Ensuring site security and preventing misuse
• Improving and analyzing service quality

4. Legal Grounds

Your personal data are processed under Article 5 of the KVKK on the following legal grounds:

• Being directly related to the establishment or performance of a contract
• Fulfillment of the data controller's legal obligation
• Protection of our legitimate interests (secure operation of the site, etc.)
• The existence of your explicit consent (for marketing communications)

5. Transfer of Personal Data

5.1. Your personal data may be transferred to authorized public institutions and organizations and to the relevant authorities within the scope of legal obligations.

5.2. The infrastructure providers used in the service process (hosting, email, analytics services) may have access to data only to a limited extent, after it is confirmed that they have taken the necessary technical and administrative security measures.

5.3. Your personal data are not sold or rented to third parties for commercial purposes.

6. Retention Periods

Your personal data are retained for the period required by the purpose of processing, within the framework of legal obligations, and for a maximum of 10 years. After this period expires, they are destroyed using secure methods.

7. Data Security

Technical and administrative measures such as SSL encryption, access control and regular security audits are applied to protect your personal data against unauthorized access, loss, alteration or disclosure.

8. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you may exercise the following rights:

• To learn whether your personal data are being processed
• To request information if they have been processed
• To learn the purpose of processing and whether they are used in accordance with that purpose
• To know the third parties to whom they are transferred, domestically or abroad
• To request correction if they have been processed incompletely or incorrectly
• To request their deletion or destruction within the framework of Article 7 of the KVKK
• To object to a result arising against you due to the analysis of the processed data exclusively through automated systems
• To request compensation if you suffer damage due to unlawful processing

To exercise your rights, you may contact kvkk@simseksoftware.com. Applications are concluded within 30 (thirty) days at the latest.