Privacy Policy

1. Data Controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European General Data Protection Regulation ("GDPR"), your personal data is processed by Kolaytik Teknoloji ("Kolaytik") in its capacity as data controller, in accordance with this Privacy Policy. This Policy explains how your personal data is collected, processed, and protected when you use the Kolaytik website and services.

2. Personal Data Processed

Depending on the nature of the Service, the following categories of personal data may be processed:

• Identity and contact information (name, surname, email, phone, organization details).
• Account and usage data (username, session logs, transaction history).
• Technical data (IP address, browser and device information, cookie data).
• Form and document content you create through the Service.

3. Purposes and Legal Bases of Processing

Your personal data is processed for the purposes of providing the Service, performing the contract, providing user support, ensuring security, fulfilling legal obligations, and improving the Service. Processing activities rely on legal bases under the KVKK and GDPR, such as the establishment or performance of a contract, compliance with a legal obligation, legitimate interest, and, where required, your explicit consent.

4. Data Transfers

Your personal data may be transferred, limited to the purposes stated above, to our business partners such as hosting and infrastructure providers, to authorized public institutions, and to legally authorized bodies, with appropriate security measures in place. Where transfers abroad are involved, the conditions required by the KVKK and GDPR are observed.

5. Retention Periods

Your personal data is retained for as long as required by the purpose for which it is processed and for the statutory retention periods stipulated in applicable legislation. When the retention period expires or the purpose of processing ceases to exist, your data is deleted, destroyed, or anonymized.

6. Data Security

Kolaytik takes administrative and technical measures to protect your personal data against unauthorized access, loss, and disclosure. 256-bit SSL encryption is used for data transmission; access permissions are restricted, and systems are reviewed regularly.

7. Rights of the Data Subject

Under Article 11 of the KVKK and the GDPR, you have the following rights regarding your personal data:

• Learn whether your personal data is being processed and request access to it.
• Request the correction of incomplete or inaccurately processed data.
• Request the erasure or destruction of your data.
• Request restriction of processing and portability of your data.
• Object to processing activities and withdraw any explicit consent you have given.

8. Cookies

Our website uses cookies. For detailed information about the types, purposes, and management of cookies, please review our Cookie Policy page.

9. Contact and Applications

To exercise your rights or to send questions about this Policy, you can contact us at info@kolaytik.com. Your applications will be evaluated within the periods stipulated by applicable legislation.