Performance ManagementPeople ServicesSelf HR ServicesOKR/KPIAI Agents

Information Text Regarding Personal Data

Title : Idenfit Bilişim Hizmetleri Sanayi ve Dış Ticaret A.Ş.
Address : Sanayi Mah. Teknopark Blv. Teknopark A1 Apt.No: 1/1A/109 Pendik
Phone : 0850 308 1878
Email Address : kvk-komite@idenfit.com
Registered Electronic Mail (KEP) : idenfitbilisim@hs01.kep.tr

As Idenfit, we possess our customers’ data within the limits and rules of the Personal Data Protection Law No. 6698 for the purpose of executing the service. Particularly, with consideration for the security of your personal data and for the protection of privacy, fundamental rights, and freedoms, we would like to inform you in accordance with the Personal Data Protection Law No. 6698.

We, at Idenfit, exert maximum effort and sensitivity regarding the security of your personal data. As a data controller according to the legislation, all kinds of private and general personal data acquired within the scope of our service relationship will be recorded, stored, updated, disclosed to third parties, transferred, classified, and processed in accordance with the Personal Data Protection Law, as detailed below and within the limits prescribed by the legislation.

Principles of processing personal data

As Idenfit:

  • a) We strive to process data in accordance with the law and principles of honesty,
  • b) We aim to ensure accuracy and currency,
  • c) Data is processed for specific, clear, and legitimate purposes,
  • ç) Data processing is limited, related to the purpose, and proportionate,
  • d) We adhere to the principle of keeping personal data for the duration specified by the relevant legislation or necessary for the purpose.

What Data Do We Collect? Data Collection Purpose?

Your personal data, which is any information that can identify you directly or indirectly, may be collected through your use of Idenfit services or interactions with Idenfit representatives. The categories of personal data we collect from you depend on the nature of your interaction with us or the Idenfit services you use, and may include one or more of the following:

  • Identity and Contact Data: We may collect your identity information such as your name, surname, contact information including postal address, phone number, fax number, and email address.
  • Customer Transaction Data: We may collect data such as call center records, invoice information, payment details, order information, and request information.
  • Financial Data: We may collect information necessary for processing payments, including credit/bank account numbers and related billing information.
  • Physical Space Security Data: We may collect data such as entry-exit records and camera recordings.
  • Transaction Security Data: When connecting to the Idenfit network, we may collect data such as IP address information and website login/logout information.
  • Marketing Data: We may collect information such as shopping history, survey responses, cookie records, and information obtained through promotional campaigns.
  • Visual and Audio Recordings: We may collect data such as visual and audio recordings.
  • Social Media Data: Data collected through social media features that allow you to share information on your social networks and interact with us on various social media sites.
  • Other Unique Identification Information: Information provided during interactions with our service centers, help desks, or other customer support channels online or offline, such as information provided via phone, mail, or in-person, to facilitate the delivery of Idenfit services and respond to your questions, as well as other unique identification information collected from you.

In addition to the purposes mentioned above, your personal data may be processed for the following purposes within the scope of our business relationships, in accordance with Articles 5 and 6 of the Personal Data Protection Law, within the legal framework and the continuity of our business processes, establishment, protection, use, and protection of rights, fulfillment of contractual obligations, execution of operations, and other purposes specified in the legislation:

  • For Customer Support and Satisfaction: Providing comprehensive customer support, offering products, services, and features that may interest you, ensuring a seamless customer experience, personalizing Idenfit services and communications, and customizing Idenfit services and communications based on your preferences.
  • For Communication and Administrative Purposes: Communicating with you to provide information about Idenfit services, responding to your questions or requests, and communicating for service completion or post-service support processes.
  • For Transaction Support: Completing transactions related to our products or services, processing payments, and organizing deliveries.
  • For Security: Ensuring the integrity and security of our websites, products, and services, and preventing security threats, fraudulent activities, or other criminal or malicious activities that may jeopardize your information. Additional security measures, such as Closed-Circuit Television (CCTV), may also be implemented to protect our locations. Within the scope of the Application, data such as transactions performed, user preferences and usage habits; location information detected through the device’s GPRS feature, IP address, device brand and operating system information, device language, mobile operator and country information may be collected through or in connection with the Application. This data is processed for the proper functioning of the Application and for the performance of its necessary functions.
  • For Business Operations: Carrying out regular business activities, including providing services, conducting business research and analytics, corporate reporting and management, and quality assurance practices
  • For Research and Innovation Purposes: Developing new products, features, and services by using research and development tools and consolidating data analysis activities.
  • For Marketing Purposes: Offering personalized offers about Idenfit services according to your privacy preferences and sharing some of your information with selected business partners, marketing service providers, and digital advertising networks to present advertisements that may interest you. For more information, see the Cookie Usage.
  • For Legal Compliance: Processing your data to operate our services and products appropriately, protect ourselves, our users, and our customers, respond to fully authorized information requests, comply with all laws, regulations, court orders, government and law enforcement requests, and resolve any customer disputes.
  • Additionally, your personal data may be processed for purposes related to information security processes, the execution of financial and accounting operations, ensuring the security of data controller operations, and following up legal processes, in connection with and proportionate to the purposes mentioned, in compliance with the legal requirements.

Method and Legal Basis of Personal Data Collection

Your personal data is collected by our company through direct interactions with our service points, communication channels (phone, email, fax, social media, call center, web, surveys, subscriber transactions, etc.), automatic technologies or interactions (see Cookie Policy), third parties, or public sources (from various third parties assisting in providing services and services), as well as official institutions, applications, and business partners providing support services.

 

In addition, your personal data may be processed by automatic or non-automatic methods within the scope of our business relationships, for the purpose of fulfilling legal obligations, performing operations related to services, ensuring the continuity of our services, presenting services within the scope of the contract, and measuring and improving service quality, in compliance with the obligations in Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Electronic Commerce Regulation Law No. 6563, Regulation on Commercial Communication and Commercial Electronic Messages No. 30998, occupational health and safety, and tax legislation and other related legislation.

Who Can Personal Processed Data be Transferred to and for What Purposes?

We keep your personal data confidential. We do not sell, rent, or exchange your personal data with others. Without your permission, we do not use or share your personal data in ways unrelated to the individuals identified in the data points where you provide data or as described in a predominant contract. Your collected personal data may be transferred in limited and proportionate ways within the framework of the Law and related legislation, depending on the reasons that require transfer and limited to these reasons, as well as the purposes specified in the Information Text.

We may retain service providers or business partners to manage or support certain elements of our commercial activities on our behalf. These may include security companies, logistics companies, banks, insurance companies, consulting firms, lawyers, customer support, service providers, contractual responsibilities, such as installation, content customization, advertising and marketing activities (including digital and personalized advertising), technology services, email service providers, data hosting, live support, debt collection, and support for Idenfit websites.

Our service providers and business partners must protect the personal data they receive from us under the contract and are prohibited from using personal data for any purpose other than that specified by Idenfit.

We may share your personal data in good faith when we believe there is an obligation to do so, such as responding to fully authorized information requests from law enforcement, regulators, courts, and other official authorities, meeting the requirements of national security or other law enforcement agencies, complying with all laws, regulations, court orders, or orders, investigating and preventing security threats, fraud, or other criminal or malicious activities, protecting the rights and properties of Idenfit and its subsidiaries, or protecting the rights or personal safety of Idenfit employees or third parties on the property or using the property.

In addition, due to the technology used by Idenfit, storage areas located abroad may be used. The reason for this is the absence of equivalent technologies in Turkey. However, databases are preserved by hashing/crypting, and no processing activities are performed outside of storage.

We assure you that your personal data will not be processed by our company for purposes other than those specified in this information document.

Children’s Data Privacy

Within the scope of Idenfit services, we do not collect data from children without the prior consent of their parents or legal guardians, or outside the permissions specified in the applicable law (as specified by local laws).

Cases Where We Can Process Your Personal Data Without Your Explicit Consent According to the Law

Although explicit consent is one of the personal data processing conditions in Article 5 of the Law, it is not the only factor that legalizes data processing activities. The Law also provides conditions for data processing activities other than explicit consent. Therefore, if one of the following conditions exists, personal data can be processed without the explicit consent of the data subject:

  • a) Clearly stipulated in the laws,
  • b) Mandatory for the protection of life or bodily integrity of the data subject or another person who cannot express their consent due to actual impossibility or whose consent is not legally valid,
  • c) Necessary for the establishment or performance of a contract, provided that it is directly related to the parties of the contract,
  • ç) Necessary for the data controller to fulfill its legal obligation,
  • d) Publicly disclosed by the data subject,
  • e) Necessary for the establishment, exercise, or protection of a right,
  • f) Necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

How Do We Protect?

All necessary technical and administrative measures are taken to ensure the security of all personal data collected by Idenfit. In this context, we implement physical, technical, organizational, and managerial measures against unauthorized access, misuse, disclosure, or alteration in accordance with the Personal Data Security Guide published by the KVKK Board, ISO/IEC 27001 Information Security, ISO/IEC 27701 Privacy Information Management standards, in compliance with the General Data Protection Regulation GDPR of the European Union.

What Are Your Rights Regarding Personal Data?

Regarding your personal data:

  • Learn whether your personal data is being processed,
  • Request information if your personal data has been processed,
  • Learn the purpose of processing personal data and whether they are used for their intended purpose,
  • Learn the third parties to whom your personal data is transferred, domestically or abroad,
  • Request the correction of your personal data if it is incomplete or inaccurate,
  • Request the deletion or destruction of your personal data within the framework of the conditions specified in the KVKK,
  • When your incomplete or incorrect data is corrected, your personal data is deleted, or destroyed, request that this situation be notified to third parties to whom your personal data has been transferred,
  • Object to the result in case a conclusion is reached against you by analyzing the processed data solely through automated systems,
  • If your personal data is processed unlawfully, demand the remedy of the damage you have suffered.

How Can You Exercise Your Rights Regarding Personal Data?

In accordance with Article 13, Paragraph 1 of the Personal Data Protection Law, you can exercise your rights mentioned above by making a request regarding the use of your personal data through the following methods and information, as stipulated in the “Communiqué on Application Procedures and Principles to the Data Controller” published on March 10, 2018, numbered 30356.

Required information in the application content:

  1. Name and surname of the applicant.
  2. If the applicant is a citizen of the Republic of Turkey, the TR Identity Number, if not, the Passport number along with the nationality of the applicant.
  3. The residence or workplace address of the applicant for notification.
  4. Email address, phone, or fax of the applicant for notification.
  5. The subject of the request by the applicant.
  6. Information and documents regarding the subject of the request by the applicant..

Application methods:

    1. The applicant can personally submit the completed “Application Form” to Idenfit Information Services Industry and Foreign Trade Inc. in a sealed envelope and deliver it to our central location with a report.
    2. The applicant can send a notification to Idenfit Information Services Industry and Foreign Trade Inc. through a notary, but the notification envelope must include the phrase “Information Request under the Personal Data Protection Law.”
    3. The applicant, using the “Secure Electronic Signature” defined in Law No. 5070 on Electronic Signature, can submit the application personally to our company by hand-delivering it to our central location and also to the registered email address idenfitbilisim@hs01.kep.tr for this subject only. For the subject, the application can also be sent to the email address kvk-komite@idenfit.com. If you have more information, you can check the “Cookie Usage” section.

You can access our application form for the rights mentioned above here.

Regarding the Processing of Your Personal Data How Long Does It Take to Respond to Your Requests?

Your requests regarding the rights related to your personal data will be evaluated, and a response will be provided within a maximum of 30 (thirty) days from the date it reaches us. In case your application is negatively evaluated, the reasons for the rejection will be sent to the electronic mail or postal address you provided in the application

Changes in Our Privacy Notice

If we make changes to our Privacy Notice, we will publish the revised notice here along with the updated revision date. In the event of significant changes that will substantially alter our privacy practices, we may inform you before the changes take effect through methods such as sending an email or posting a notification on our corporate website and/or social media accounts.

Publication Date:09.01.2024

Last updated: