Privacy Notices

PRIVACY NOTICE FOR CUSTOMERS, SUPPLIERS AND BUSINESS PARTNERS ON THE PROCESSING OF PERSONAL DATA

Document No: KVKK_30 · Publication Date: 2 October 2026

As Oredata Yazılım Anonim Şirketi (“Oredata” or the “Company”), we attach importance to the protection of your personal data and, within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), we wish to inform you by means of this privacy notice (“Privacy Notice”) about the method, purpose and legal grounds of the processing of your personal data, to whom and for what purposes it may be transferred, and your rights under the relevant law.

In all personal data processing activities we carry out, we act in compliance with all obligations and principles required under the relevant legislation, primarily the KVKK, and we take the necessary security measures to ensure that your personal data is processed securely.

1) DATA CONTROLLER

Within the scope of the KVKK, your personal data is processed by Oredata in its capacity as data controller, limited to the purposes set out in this Privacy Notice.

2) SCOPE OF THIS PRIVACY NOTICE

This Privacy Notice applies to our Company’s customers, potential customers, suppliers, business partners, consultants and their authorised representatives and employees, to natural persons interested in our Company’s products and services, and to other natural persons who contact our Company in the context of a commercial relationship.

Separate privacy notices apply to our employees, employee candidates, interns and employees’ relatives; the Events and Organisations Privacy Notice applies to event participants; the Website Request and Contact Forms Privacy Notice applies to requests submitted through our website; the Potential Customer Privacy Notice applies to potential customers contacted by our Company until the discussions turn into a commercial relationship; and the Company Shareholder and Authorised Representative Privacy Notice applies to our Company’s shareholders, members of the board of directors and authorised signatories.

With respect to personal data processed by our Company in its capacity as data processor on behalf of its customers, the data controller is the relevant customer, and such data is not within the scope of this Privacy Notice.

3) YOUR PERSONAL DATA THAT IS PROCESSED

Within the scope of the commercial relationship between you and our Company, and in accordance with the KVKK, your personal data and information may be recorded, stored, updated, disclosed to third parties where permitted by legislation, transferred and classified within the framework described below:

  • Identity Information: Name, surname, Turkish Republic identity number, tax identification number, signature, identity information contained in signature circulars and powers of attorney, passport information (if requested in international business processes),
  • Contact Information: Corporate e-mail address, corporate and mobile telephone number, fax number, business address, contact information of the company you represent,
  • Professional Experience Information: Position and title, area of expertise, professional qualification and certification information, profile information on publicly available professional networking platforms, presentation and speaker information,
  • Customer Transaction Information: Request and complaint records, order and quotation information, contract information, project and support request records, sales opportunity records, meeting and discussion notes, correspondence records,
  • Financial Information: Invoice and payment information, bank account information, current account and balance information, collateral information, financial information of the company you represent,
  • Legal Transaction Information: Information contained in contracts and their annexes, signature circular and power of attorney information, lawsuit and enforcement proceedings information, formal notices and correspondence records, information relating to compliance and audit processes,
  • Transaction Security Information: Where you access our Company’s systems, user name and authorisation information, IP address, log records, records relating to corporate e-mail correspondence,
  • Visual and Audio Recordings: Photographs and video recordings taken in the context of events, promotional and training activities, and recordings and note outputs created in online meetings with your approval,
  • Location Information: Transportation and accommodation information in the context of business trips and event organisations.

Our Company does not intend to collect special categories of personal data within the scope of the commercial relationship.

4) SCOPE, PURPOSE AND LEGAL GROUNDS OF THE PROCESSING OF YOUR PERSONAL DATA

Your personal data will be processed within the scope of the legal grounds listed in Article 5 of the KVKK, as explained in detail below:

  • Establishing the commercial relationship, conducting contract negotiations, preparing quotations, concluding non-disclosure agreements and carrying out proof of concept (POC) / demo work

For this purpose, your identity, contact, professional experience and customer transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

  • Concluding contracts, verifying signing authority and performing contractual obligations

For this purpose, your identity, contact, legal transaction and financial information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (a) of the KVKK, it is expressly provided for by law (primarily the Turkish Commercial Code No. 6102).

  • Carrying out consultancy, project implementation, delivery, support and managed service processes relating to our products, services and solutions

For this purpose, your identity, contact, professional experience, customer transaction and transaction security information is processed within the scope of the condition that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract.

  • Carrying out customer relationship management processes, following up requests and complaints, measuring satisfaction, and developing additional product and service offers for our existing customers

For this purpose, your identity, contact, professional experience and customer transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and that, pursuant to Article 5/2 (c) of the KVKK, it is necessary for the performance of a contract.

  • Carrying out purchasing and procurement processes, managing supplier and business partner relationships, and maintaining subcontractor and consultancy relationships

For this purpose, your identity, contact, professional experience, financial and legal transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller.

  • Carrying out deal registration, licence sales, authorisation and cloud service billing processes within the scope of vendor and business partner programmes

For this purpose, your identity, contact, professional experience and customer transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller.

  • Carrying out tender and bidding processes, and establishing consortium and cooperation relationships

For this purpose, your identity, contact and professional experience information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller.

  • Carrying out finance and accounting activities, and performing invoicing, collection and payment transactions

For this purpose, your identity, contact, financial and customer transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (ç) of the KVKK, processing is necessary for the data controller to fulfil its legal obligation (primarily under the Tax Procedure Law No. 213 and the Turkish Commercial Code No. 6102), and that, pursuant to Article 5/2 (c) of the KVKK, it is necessary for the performance of a contract.

  • Fulfilling our legal, financial and commercial obligations, and complying with notification and reporting obligations towards public institutions and organisations

For this purpose, your identity, contact, financial, legal transaction and customer transaction information is processed within the scope of the conditions that, pursuant to Article 5/2 (a) of the KVKK, it is expressly provided for by law, and that, pursuant to Article 5/2 (ç) of the KVKK, processing is necessary for the data controller to fulfil its legal obligation.

  • Following up and conducting legal affairs, pursuing receivables, managing lawsuit and enforcement proceedings, and obtaining evidence

For this purpose, your identity, contact, financial, legal transaction and customer transaction information is processed within the scope of the condition that, pursuant to Article 5/2 (e) of the KVKK, data processing is necessary for the establishment, exercise or protection of a right.

  • Carrying out information security processes, defining access rights to our Company’s systems, and performing audit and compliance activities

For this purpose, your identity, contact and transaction security information is processed within the scope of the conditions that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and that, pursuant to Article 5/2 (ç) of the KVKK, processing is necessary for the data controller to fulfil its legal obligation.

  • Carrying out business travel, event and organisation processes, and arranging transportation and accommodation

For this purpose, your identity, contact and location information is processed within the scope of the conditions that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract, and that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller.

  • Using note-taking and transcription features in online meetings

For this purpose, your identity information and visual and audio recording information is processed on the basis of your explicit consent pursuant to Article 5/1 of the KVKK. This feature is used after notifying all participants at the beginning of the meeting and obtaining their approval; if approval is not given, the feature is not used.

  • Carrying out our Company’s promotional and corporate communication activities, and preparing and publishing success stories and reference studies

For this purpose, your identity, professional experience, and visual and audio recording information is processed on the basis of your explicit consent pursuant to Article 5/1 of the KVKK.

5) METHOD OF COLLECTING PERSONAL DATA

For the purposes listed above and on the legal grounds set out in Article 5 of the KVKK as specified, your personal data is collected and processed by automated means, or by non-automated means provided that they form part of a data recording system, through e-mail correspondence, telephone calls and online meetings conducted with you, face-to-face meetings, the exchange of business cards, requests submitted through our website, documents such as contracts, quotations, signature circulars, powers of attorney and invoices submitted by you or by the company you represent, records entered into our Company’s customer relationship management and project management systems, events we attend or organise, vendor and business partner portals, publicly available professional networking platforms, and the trade registry and similar publicly available sources; by verbal, written and electronic methods.

6) TRANSFER OF YOUR PERSONAL DATA WITHIN TÜRKİYE

As a rule, pursuant to Article 8/1 of the KVKK, personal data may not be transferred by our Company to other natural or legal persons without the explicit consent of the data subject. However, transfer without the explicit consent of the data subject is possible in the cases provided for in Articles 5/2 and 6/3 of the KVKK pursuant to Article 8/2 of the KVKK, and pursuant to Article 8/3 of the KVKK. Accordingly, your personal data is shared within Türkiye with the persons and institutions specified below, in compliance with the conditions set out in the KVKK and other relevant legislation, by taking the necessary security measures, and within the framework of our company policies.

Your personal data is shared with the following parties within the scope of the condition that, pursuant to Article 5/2 (c) of the KVKK, processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract:

  • Your identity, contact, professional experience and customer transaction data with the subcontractors, solution partners and consultants with whom we work in the execution of projects,
  • Your identity, contact and customer transaction data with our service providers that provide IT infrastructure and software support so that our services can be delivered,
  • Your identity, contact and location data with organisation agencies, travel agencies and accommodation establishments in the context of carrying out event and organisation processes,
  • Your identity, contact and customer transaction data is shared with our business partners in tender and consortium processes.

Your personal data is shared with the following parties within the scope of the condition that, pursuant to Article 5/2 (ç) of the KVKK, processing is necessary for the data controller to fulfil its legal obligation:

  • Your identity, contact and financial data with the service providers from which we receive accounting and financial advisory services,
  • Your identity and financial data with banks for the purpose of carrying out payment and collection transactions,
  • Your identity, contact and financial data with the Revenue Administration and other competent public institutions and organisations in the context of electronic invoicing and tax return processes,
  • Your identity, contact and professional experience data is shared with TÜBİTAK, KOSGEB, technopark management companies and relevant public institutions in the context of research and development and incentive programmes.

Your personal data is shared with the following parties within the scope of the condition that, pursuant to Article 5/2 (e) of the KVKK, data processing is necessary for the establishment, exercise or protection of a right:

  • Your identity, contact, financial, legal transaction and customer transaction data with lawyers, auditors, financial advisers and other third parties from which we receive consultancy services, for the purpose of fulfilling our legal obligations and defending our rights,
  • Your identity, contact, financial and legal transaction data is shared, where necessary, with courts, enforcement offices, notaries and other official institutions and organisations.

Your personal data is shared with the following parties within the scope of the condition that, pursuant to Article 5/2 (f) of the KVKK, processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

  • Your identity, contact and transaction security data with service providers that provide IT infrastructure, information security and software support so that our Company’s operations can be carried out efficiently,
  • Your identity and contact data is shared with cargo and courier service providers.

On the basis of your explicit consent pursuant to Article 5/1 of the KVKK, your identity, professional experience, and visual and audio data is shared with event, news and advertising agencies for the purpose of carrying out our Company’s promotional, corporate communication and reference activities, and is published in materials such as written and visual communication materials belonging to the Company or to third parties, interviews, corporate social media accounts, corporate newsletters, the website, written and visual announcements and advertising campaigns.

7) TRANSFER OF YOUR PERSONAL DATA ABROAD

In carrying out its activities, our Company receives cloud-based services from service providers established abroad for its information technology infrastructure, corporate e-mail and document management, customer relationship management, project management and information security processes. For this reason, your personal data may be transferred abroad within the framework explained below.

Your personal data is transferred to the following persons located abroad or processing personal data abroad on the basis of the standard contract announced by the Personal Data Protection Board within the scope of Article 9 of the KVKK, which contains matters such as the data categories, the purposes of the data transfer, the recipients and groups of recipients, the technical and administrative measures to be taken by the data recipient, and the additional measures taken for special categories of personal data; incidental transfers in the context of business trips are set out separately below. Upon your request, a copy of the provisions of the said standard contract will be sent to you free of charge.

Within the scope of the cloud-based applications used by our Company for the purposes of carrying out its information technology and data processing processes, information security processes, access rights, communication activities and business activities, your identity, contact, professional experience, customer transaction, financial, legal transaction, transaction security, location, and visual and audio data is stored in the data centres/cloud environments of service providers located abroad.

For the purpose of carrying out customer relationship management, project management, documentation and work tracking processes, your identity, contact, professional experience and customer transaction data is transferred to software providers established abroad.

For the purpose of carrying out deal registration, licence sales and cloud service billing processes within the scope of vendor and business partner programmes, your identity, contact, professional experience and customer transaction data is transferred to vendor and business partner organisations established abroad and to their portals.

In the context of commercial relationships conducted with our customers and business partners established abroad, tender and consortium processes, and participation in events held abroad, your identity, contact, professional experience and customer transaction data is transferred to the relevant customers, business partners and event organisers.

In the context of planning and carrying out business trips, your identity, contact and location data is transferred to airlines, accommodation establishments and reservation platforms, provided that the transfer is incidental pursuant to Article 9/6 (c) of the KVKK, on the basis that the transfer is necessary for the establishment or performance of a contract to be concluded between our Company and another natural or legal person for the benefit of the data subject.

8) YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Our Company hereby informs you that, pursuant to Article 11 of the KVKK, by applying to our Company you have the right to: (a) learn whether your personal data is processed, (b) request information if it has been processed, (c) learn the purpose of processing and whether it is used in accordance with its purpose, (ç) know the third parties to whom it is transferred within Türkiye / abroad, (d) request its rectification if it has been processed incompletely / inaccurately, (e) request its erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK, (f) request notification of the operations carried out pursuant to subparagraphs (d) and (e) above to the third parties to whom it has been transferred, (g) object to the occurrence of a result to your detriment by means of analysis exclusively through automated systems, and (ğ) claim compensation for damage in the event that you suffer damage due to its unlawful processing.

In this context, you may submit your requests regarding your rights by completing the Personal Data Protection Law Data Subject Application Form available on our website (https://oredata.com/en/data-subject-application/), or by drawing up your own request in a manner that meets the conditions determined by the Personal Data Protection Authority, and sending it to our registered e-mail address or physical postal address given below, using the methods determined by the Personal Data Protection Authority. Depending on the nature of the request, Oredata will conclude the request free of charge as soon as possible and within the period stipulated in the KVKK.

  • Our Application Address: Çiftehavuzlar Mah. Eski Londra Asfaltı Cad. Kuluçka Mrk. C1 Blok No: 151/1E İç Kapı No: 303 Esenler / İstanbul PK: 34220
  • Our Registered Electronic Mail Address: oredatayazilim@hs01.kep.tr

PRIVACY NOTICE FOR POTENTIAL CUSTOMERS

Document No: KVKK_34 · Publication Date: 2 October 2026

As Oredata Yazılım Anonim Şirketi (“Oredata” or the “Company”), we attach importance to the protection of your personal data. We process your personal data because we contact you for the purpose of initiating a business discussion with you. Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”), we would like to inform you by means of this privacy notice (the “Privacy Notice”) about where we obtain your personal data, for what purpose and on what legal ground we process them, to whom we may transfer them, and your rights.

1) DATA CONTROLLER

Under the KVKK, your personal data are processed by Oredata in its capacity as data controller, limited to the purposes set out in this Privacy Notice.

2) YOUR PERSONAL DATA PROCESSED AND THE SOURCE OF YOUR DATA

Your personal data are obtained by automated means, and by non-automated means provided that they form part of a data filing system, from the following sources:

  • Your profile on publicly available professional networking platforms and the corporate sales solutions of these platforms to which our Company subscribes,
  • Third-party data provider platforms that supply corporate contact information,
  • The website of the institution you represent and its publicly available corporate communication channels,
  • Business card or participant information shared by you at fairs, conferences and events that we attend or organise,
  • The trade registry and similar publicly available records.

Your personal data processed within this scope are as follows:

  • Identity Information: Name, surname,
  • Contact Information: Corporate e-mail address, corporate telephone number, professional networking platform profile address, business address,
  • Professional Experience Information: Position and title information, the institution you represent, area of responsibility, professional expertise and experience information, publicly available professional profile information,
  • Customer Transaction Information: Records of communications established with you, meeting notes, service headings you are interested in, communication preferences and follow-up records.

Our Company does not process special categories of personal data within this scope. Your personal data are limited solely to data that are linked to your professional identity and are of a corporate nature; information relating to your private life is not processed.

3) PURPOSE AND LEGAL GROUND OF THE PROCESSING OF YOUR PERSONAL DATA

Your personal data are processed within the scope of the legal grounds listed in Article 5 of the KVKK, as explained below:

  • Contacting you about our Company’s products and services, requesting a business meeting and evaluating potential cooperation opportunities

For this purpose, your identity, contact, professional experience and customer transaction information are processed within the scope of the condition that data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, pursuant to Article 5/2 (f) of the KVKK. Our Company’s legitimate interest in this context is to be able to carry on its commercial activities directed at corporate customers and to reach the relevant decision-makers.

  • Recording the communications established with you and your communication preferences, and preventing repeated contact

For this purpose, your identity, contact and customer transaction information are processed within the scope of the condition that processing is necessary for the legitimate interests of the data controller pursuant to Article 5/2 (f) of the KVKK. If you notify us that you do not wish to be contacted, this preference is recorded in order to ensure that you are not contacted again.

  • Sending commercial electronic messages to you

For this purpose, your identity and contact information are processed on the basis of the separate approval to be obtained from you under Law No. 6563 on the Regulation of Electronic Commerce and your explicit consent pursuant to Article 5/1 of the KVKK. If you do not give approval, no commercial electronic messages are sent to you.

  • Carrying out pre-contractual and contractual processes if the discussions turn into a commercial relationship

For this purpose, your identity, contact, professional experience and customer transaction information are processed within the scope of the condition that the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract, pursuant to Article 5/2 (c) of the KVKK. In this case, the Company Privacy Notice begins to apply.

4) TRANSFER OF YOUR PERSONAL DATA

Your personal data are shared with the sales and marketing units within our Company and are also transferred to service providers from which we obtain customer relationship management, corporate e-mail and information technology infrastructure services, on the legal ground that processing is necessary for the legitimate interests of the data controller pursuant to Article 5/2 (f) of the KVKK.

Your personal data are transferred, on the basis of the standard contract announced by the Personal Data Protection Board within the scope of Article 9 of the KVKK, to service providers established abroad from which our Company obtains customer relationship management, sales tools, corporate e-mail and information technology infrastructure services, and are stored in the data centres/cloud environments of these providers located abroad. Upon your request, a copy of the provisions of the said standard contract will be sent to you free of charge.

5) YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Our Company hereby informs you that, pursuant to Article 11 of the KVKK, by applying to our Company you have the right to: (a) learn whether your personal data are processed, (b) request information if they have been processed, (c) learn the purpose of processing and whether they are used in accordance with their purpose, (ç) know the third parties in Turkey or abroad to whom they are transferred, (d) request rectification if they are processed incompletely / inaccurately, (e) request their erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK, (f) request notification of the operations carried out pursuant to sub-paragraphs (d) and (e) above to third parties to whom they have been transferred, (g) object to the occurrence of a result to your detriment by means of analysis exclusively through automated systems, and (ğ) claim compensation for damages in the event that you suffer damage due to their unlawful processing.

In this context, you may send your requests regarding your rights by filling in the Personal Data Protection Law Data Subject Application Form available on our website (https://oredata.com/en/data-subject-application/), or by preparing your own request in a manner that meets the conditions determined by the Personal Data Protection Authority, to our registered e-mail address or our physical postal address given below, by the methods determined by the Personal Data Protection Authority. Oredata will conclude the request free of charge as soon as possible, depending on the nature of the request, and within the period stipulated in the KVKK.

  • Our Application Address: Çiftehavuzlar Mah. Eski Londra Asfaltı Cad. Kuluçka Mrk. C1 Blok No: 151/1E İç Kapı No: 303 Esenler / İstanbul PK: 34220
  • Our Registered Electronic Mail Address: oredatayazilim@hs01.kep.tr

PRIVACY NOTICE FOR WEBSITE REQUEST AND CONTACT FORMS

Document No: KVKK_32 · Publication Date: 2 October 2026

As Oredata Yazılım Anonim Şirketi (“Oredata” or the “Company”), we attach importance to the protection of your personal data and, within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), we would like to inform you by means of this privacy notice (the “Privacy Notice”) about the method, purpose and legal ground of the processing of the personal data you submit through the contact and request forms on our website, to whom and for what purposes they may be transferred, and your rights under the relevant law.

1) DATA CONTROLLER

Under the KVKK, your personal data are processed by Oredata in its capacity as data controller, limited to the purposes set out in this Privacy Notice.

2) YOUR PERSONAL DATA PROCESSED

If you fill in the contact and request forms on our website, the following personal data of yours are processed:

  • Identity Information: Name, surname,
  • Contact Information: E-mail address, telephone number, country information,
  • Professional Experience Information: Name of the institution/company you represent, position and title information,
  • Customer Transaction Information: Subject and content of the request you submit through the form, the service heading you are interested in, the date of the request and follow-up records,
  • Transaction Security Information: Technical records relating to the form submission (IP address, time of submission).

We recommend that, when filling in the form, you do not share personal data that are not necessary for the evaluation of your request.

3) SCOPE, PURPOSE AND LEGAL GROUND OF THE PROCESSING OF YOUR PERSONAL DATA

Your personal data will be processed within the scope of the legal grounds listed in Article 5 of the KVKK, as explained in detail below:

  • Evaluating the request submitted by you, responding to your request and contacting you

For this purpose, your identity, contact, professional experience and customer transaction information are processed within the scope of the conditions that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, pursuant to Article 5/2 (f) of the KVKK, and, where your request relates to a pre-contractual negotiation, that processing is directly related to the establishment of a contract, pursuant to Article 5/2 (c) of the KVKK.

  • Forwarding your request to the relevant unit and operating customer relationship management processes

For this purpose, your identity, contact, professional experience and customer transaction information are processed within the scope of the condition that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, pursuant to Article 5/2 (f) of the KVKK.

  • Keeping records of requests and complaints, measuring and improving service quality

For this purpose, your contact and customer transaction information are processed within the scope of the condition that processing is necessary for the legitimate interests of the data controller pursuant to Article 5/2 (f) of the KVKK.

  • Ensuring information security and preventing misuse

For this purpose, your transaction security information is processed within the scope of the conditions that processing is necessary for the legitimate interests of the data controller pursuant to Article 5/2 (f) of the KVKK and that processing is necessary for the data controller to fulfil its legal obligation pursuant to Article 5/2 (ç) of the KVKK.

  • Sending commercial electronic messages to you

For this purpose, your identity and contact information are processed on the basis of the separate approval you will give under Law No. 6563 on the Regulation of Electronic Commerce and your explicit consent pursuant to Article 5/1 of the KVKK. Not giving this approval does not affect the evaluation of your request.

4) METHOD OF COLLECTION OF PERSONAL DATA

Your personal data are collected electronically, by automated means, through your filling in the contact and request forms on our website.

5) TRANSFER OF YOUR PERSONAL DATA

Your personal data are shared with the relevant sales, marketing and technical units within our Company so that your request can be evaluated; in addition, they are transferred:

  • to service providers from which we obtain customer relationship management and information technology infrastructure services, on the legal ground that processing is necessary for the legitimate interests of the data controller pursuant to Article 5/2 (f) of the KVKK,
  • where necessary, to lawyers, auditors, courts, enforcement offices and other authorised public institutions and organisations for the purpose of fulfilling our legal obligations and protecting our rights, on the legal grounds set out in Article 5/2 (ç) and (e) of the KVKK.

Your personal data are transferred, on the basis of the standard contract announced by the Personal Data Protection Board within the scope of Article 9 of the KVKK, to service providers established abroad from which our Company obtains customer relationship management, corporate e-mail and information technology infrastructure services, and are stored in the data centres/cloud environments of these providers located abroad. Upon your request, a copy of the provisions of the said standard contract will be sent to you free of charge.

6) YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Our Company hereby informs you that, pursuant to Article 11 of the KVKK, by applying to our Company you have the right to: (a) learn whether your personal data are processed, (b) request information if they have been processed, (c) learn the purpose of processing and whether they are used in accordance with their purpose, (ç) know the third parties in Turkey or abroad to whom they are transferred, (d) request rectification if they are processed incompletely / inaccurately, (e) request their erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK, (f) request notification of the operations carried out pursuant to sub-paragraphs (d) and (e) above to third parties to whom they have been transferred, (g) object to the occurrence of a result to your detriment by means of analysis exclusively through automated systems, and (ğ) claim compensation for damages in the event that you suffer damage due to their unlawful processing.

In this context, you may send your requests regarding your rights by filling in the Personal Data Protection Law Data Subject Application Form available on our website (https://oredata.com/en/data-subject-application/), or by preparing your own request in a manner that meets the conditions determined by the Personal Data Protection Authority, to our registered e-mail address or our physical postal address given below, by the methods determined by the Personal Data Protection Authority. Oredata will conclude the request free of charge as soon as possible, depending on the nature of the request, and within the period stipulated in the KVKK.

  • Our Application Address: Çiftehavuzlar Mah. Eski Londra Asfaltı Cad. Kuluçka Mrk. C1 Blok No: 151/1E İç Kapı No: 303 Esenler / İstanbul PK: 34220
  • Our Registered Electronic Mail Address: oredatayazilim@hs01.kep.tr

This English text is a translation provided for information purposes. In case of any discrepancy, the Turkish text prevails.