Datu paziņojums

Under Law No. 6698 (“KVKK”) and related rules, the controller of your personal data is Kahraman.com (“Company”).

A trade-registry title and tax number are not yet registered. Services are delivered remotely; there is no physical office. Meetings are by appointment.

Contact: [email protected] · +90 (850) 242 19 32

Website: https://kahraman.com

This notice covers personal data processed in enterprise software development, project planning and management, product/interface design, digital marketing, reporting, support, proposal and contract processes, and the contact channels on kahraman.com.

When a client project requires processing data of third parties, the client is usually the controller and the Company acts as a processor under contract. A data-processing agreement or equivalent KVKK safeguards then apply.

Identity: name, surname, title.

Contact: email, phone, company/organisation name, business address.

Customer transaction data: contact-form and quote content, project notes, correspondence, service preference, budget range (if shared).

Marketing: newsletter signup, communication preference, consent records (if any).

Security: IP address, browser and device data, access time, security and error logs, cookie identifiers.

Financial / commercial data (during a contract): invoice details, tax identifiers, payment records — only for contract and accounting duties.

We do not aim to collect special-category data. If you share such data, we process it only as needed to handle your request and under KVKK conditions.

Data may be collected through website contact and newsletter forms, email, phone, WhatsApp and similar channels, in-person or online meetings, contract and proposal processes, and automatically (server logs, essential and preference cookies).

Collection may be fully or partly automated, or non-automated where it is part of a filing system.

Receiving, assessing and answering contact requests.

Running proposal, discovery, scope, pre-contract and post-contract processes.

Delivering software, design, project management, marketing and reporting services; managing support and post-launch operations.

Customer relations, quality and satisfaction.

Sending newsletters and updates where you consent or the law allows.

Information security, preventing unauthorised access and abuse, and keeping the site/systems running.

Accounting, invoicing, tax and other legal duties.

Protecting rights and preparing a defence if a dispute arises.

Your data may be processed on the following KVKK Article 5 (and where needed Article 6) grounds:

Necessity for concluding or performing a contract with you.

Necessity for the controller’s legal obligation.

Necessity for the establishment, exercise or defence of a right.

Necessity for the controller’s legitimate interests without harming your fundamental rights (for example site security, service quality, fraud prevention).

Your explicit consent (especially newsletters, marketing and non-essential cookies).

Data may be shared, as needed, with hosting, cloud, email, communications and security providers in Turkey; accounting partners; and competent authorities when the law requires.

Data is not sold or rented for marketing. Transfers follow KVKK Articles 8 and 9.

If data is transferred abroad, it is done to countries with adequate protection, with Board permission, or with appropriate safeguards (undertakings, standard clauses). This section is updated if infrastructure changes.

Data is kept for as long as the purpose requires and as statutory limitation / retention rules demand (for example the Turkish Commercial Code, Tax Procedure Law, e-commerce and consumer rules).

Contact-form records: a reasonable period to close the request and follow up; if a business relationship starts, contract and legal retention periods.

Newsletter records: until you unsubscribe or withdraw consent.

Security and access logs: a period proportionate to security and audit needs.

When the period ends, data is deleted, destroyed or anonymised.

To learn whether your data is processed and, if so, to request information.

To learn the purpose and whether it is used accordingly.

To know the third parties in Turkey or abroad to whom it is transferred.

To request correction of incomplete or inaccurate data; deletion or destruction; and notification of those third parties.

To object to a result against you that arises solely from automated analysis.

To claim compensation if you suffer damage from unlawful processing.

Send requests about your rights to [email protected] in line with the procedures set by the Personal Data Protection Authority.

Include information that can verify your identity, the request and any supporting documents. Requests are handled free of charge within the statutory period (as a rule within thirty days). A Board tariff fee may apply if extra cost is required.

If the request is refused, the answer is insufficient, or no answer is given in time, you may complain to the Personal Data Protection Board.

This notice may be updated for legal, process or infrastructure changes. The current version is published on the legal pages at https://kahraman.com.