General Information on the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (KVKK) was enacted to protect fundamental rights and freedoms, particularly privacy, in the processing of personal data, and to regulate the obligations, procedures, and principles that natural and legal persons processing personal data must comply with.

In accordance with KVKK, our company, [INNOVA], as the Data Controller, informs its customers, employees, and candidates as follows, in accordance with Article 10 of the KVKK.

Purposes, Collection Methods, and Legal Grounds for Processing Your Personal Data

Personal data refers to any information that identifies or can identify an individual. Such information may include your name, address, email address, phone number, or the IP address of the device you use to access our website. Processing of personal data involves any operation performed on the data, such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, acquisition, classification, or prevention of use, whether through automated or non-automated means, as long as it is part of a data recording system.

Your personal data will be processed:

Lawfully and fairly,
Accurately and, when necessary, kept up-to-date,
For specific, explicit, and legitimate purposes,
In a manner that is relevant, limited, and proportionate to the purposes for which they are processed,
For the period prescribed by relevant laws or required for processing purposes.

As the Data Controller, our company processes personal data in accordance with its operational purposes, including but not limited to the following:

Identity verification,
Execution of services and business activities,
Providing customer support and troubleshooting,
Ensuring compliance with company policies and regulations,
Informing customers about service updates, campaigns, and new features,
Conducting internal and external audits,
Sharing necessary information with authorized institutions as required by law,
Managing financial, accounting, and invoicing processes,
Following up on legal processes and fulfilling legal obligations,
Carrying out communication and correspondence with government institutions,
Planning and executing customer satisfaction activities,
Managing personnel recruitment and employment processes,
Providing employee benefits and tracking performance evaluation processes.

Your personal data will be processed in accordance with the relevant laws and regulations, and if the processing purpose changes, additional consent will be obtained.

Collection Methods and Processing of Personal Data

Our company collects and processes your personal data through various methods, including:

Information provided by you during service usage, contract formation, and throughout your business relationship,
Third-party sources, including public institutions and legal regulations,
Electronic and physical records, such as application forms, online platforms, emails, and call logs,
Security systems, including cameras in company premises.

Transfer of Personal Data

Our company may transfer personal data to third parties (companies, institutions, affiliates, individuals) in compliance with KVKK and applicable laws. Personal data may also be transferred abroad, provided that adequate security measures are taken.

In accordance with Article 138 of the Turkish Penal Code and Article 7 of KVKK, personal data will be deleted, destroyed, or anonymized when the processing reasons no longer exist, either at our discretion or upon request from the data subject.

Your Rights as a Data Subject

According to Article 11 of KVKK, individuals whose personal data is processed have the right to:

Learn whether their personal data is processed,
Request information if their data has been processed,
Learn the purpose of data processing and whether it is used in accordance with its purpose,
Know the third parties to whom their data has been transferred, within or outside the country,
Request correction of incomplete or inaccurate data and ensure that third parties are informed of the correction,
Request the deletion, destruction, or anonymization of personal data if the reasons for processing no longer exist,
Object to an outcome arising from automated data analysis if it has negative consequences for them,
Seek compensation if they suffer damages due to unlawful data processing.

Changes to the Personal Data Protection Policy

This "General Information on the Personal Data Protection Law" may be updated as needed to reflect changes in our data protection services, new legal requirements, or newly introduced services.