Online Visitor Clarification Text on the Processing Personal Data

Online Visitor Clarification Text On The Processing Personal Data

As Boss Yönetişim Hizmetleri Anonim Şirketi (“Company”), we place the utmost importance on the security of your personal data. With this awareness, we pay great attention to ensuring that your personal data, whether sensitive or general, is processed, stored, and erased in compliance with the Law on the Protection of Personal Data No. 6698 (“Law” or “KVKK”), secondary regulations (regulations, communiqués, circulars) enacted and to be enacted pursuant to the Law, and binding decisions issued and to be issued by the Personal Data Protection Board. With full awareness of our responsibility as the “Data Controller” as defined in the Law, we process your personal data related to your visit as described below and within the limits mandated by the applicable legislation.

1. Information on the Data Controller

Pursuant to the Law, Boss Yönetişim Hizmetleri Anonim Şirketi, registered with the Istanbul Trade Registry Office under tax identification number 1800379183, and headquartered at “Esentepe Mahallesi Büyükdere Cad. Astoria Sit. No: 127 B/8 Şişli/Istanbul,” is the Data Controller.

2. Categories and Types of Personal Data Processed

Credentials Name, Surname
Contact Information Phone, Email adress
Professional Information Company Name

3. Methods of Collecting Personal Data and Activities from Which It Is Obtained

As a Company, we collect your personal data through automated methods and/or non-automated methods provided that it forms part of an automated data recording system.

Data Category Activity From Which Obtained
Identity
  • Contact Form Available on Website
Contact
  • Contact Form Available on Website
Professional
  • Contact Form Available on Website

4. Purposes and Legal Grounds for Processing Personal Data

As a Company, your personal data is processed within the scope of the purposes and legal grounds outlined below, in accordance with the limits specified in the Law, and always in a lawful, fair, relevant, limited, and proportionate manner.

Data Purposes of Processing Legal Ground
Identity
  • Responding to complaints, suggestions, or any requests you may have,
  • Communicating with you,
  • Providing information about the Company’s products and services,
  • Managing risk processes,
  • Evaluating suggestions to improve business processes.
  • Providing information about the Company’s products and services,
KVKK Article 5/2(c, f):
  • (c) Necessary for the establishment or performance of a contract,
  • (f) Necessary for legitimate interests.
Contact
Professional
  • Providing information about the Company’s products and services,
  • Evaluating suggestions to improve business processes.

5. Transfer of Personal Data

Recipients Purposes of Transfer Legal Ground
Authorized internal departments and other group companies if necessary
  • Carrying out customer relationship management processes and activities aimed at customer satisfaction,
  • Responding to requests and complaints,
  • Providing information to authorized persons, institutions and organizations,
  • Ensuring the security of data controller operations
KVKK Article 8/2(a):
  • Legitimate interests of the data controller without harming the rights and freedoms of the data subject.
  • Legal obligations of the data controller.
Relevant public institutions and organizations when required
Overseas-based platforms (Typeform, Mailchimp)
  • Communicating with you via the filled-out form, sending communications through email or other methods you have consented to.
KVKK Article 9/4(c), 9/6(a):
  • (4-c) Existence of a standard contract announced by the Board, which includes issues such as data categories, purposes of data transfer, recipient and recipient groups, technical and administrative measures to be taken by the data recipient, and additional measures taken for special personal data.
  • (6-a) The relevant person must give explicit consent to the transfer, provided that he or she is informed about possible risks.

6. Rights of the Data Subject

At any time, you may apply to the Company and exercise your rights under Article 11 of the Law, including:

  • Learning whether your personal data is processed,
  • Requesting information if your personal data has been processed,
  • Learning the purpose of processing your personal data and whether it is used in accordance with that purpose,
  • Knowing third parties to whom your personal data has been transferred within Türkiye or abroad,
  • Requesting correction of incomplete or inaccurate data,
  • Requesting deletion or destruction of personal data within the scope of Article 7 of the Law,
  • Requesting notification to third parties to whom your data has been transferred about the actions taken under Article 11(d) and (e),
  • Objecting to unfavorable outcomes resulting from automated processing,
  • Requesting compensation for damages incurred due to unlawful processing of your personal data.

To exercise these rights, you may submit a request through the methods specified at www.informasoft.com, by completing the application form provided, or through the following channels:

  • By sending an email to [email protected] using your registered electronic mail (KEP) address,
  • By sending a notarized application to “Esentepe Mahallesi Büyükdere Cad. Astoria Sit. No: 127 B/8 Şişli/Istanbul,”
  • By personally submitting a signed application form to the same address.

The Company reserves the right to charge a processing fee for written responses exceeding 10 pages, at 1 Turkish Lira per page, or for other storage mediums such as CDs or flash drives, in compliance with the "Communiqué on the Procedures and Principles of Application to the Data Controller."

The Company retains the right to amend this Clarification Text in response to changes in the Law, secondary regulations, and Board decisions. Amendments will be effective immediately upon notification.

EXPLICIT CONSENT DECLARATION FOR TRANSFER OF PERSONAL DATA ABROAD

I have read the Clarification Text on the Processing of Personal Data within the Scope of this Contact Form, and I acknowledge that the personal data processed in the form, including identity, contact, and professional information, will be transferred abroad using overseas-based platforms (Typeform, Mailchimp) in accordance with Article 9/4-c and Article 9/6-a of the Law. I have been informed about the processing and transfer purposes, potential risks, and my rights under Article 11 of the Law, and I explicitly consent to the processing and transfer of my personal data as specified in the Clarification Text.