KVKK & GDPR

Clarification Text

Last Updated: July 1, 2025

This Clarification Text has been prepared by Datazza Bilişim A.Ş. as the Data Controller in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles of Fulfilling the Obligation to Inform, as well as the General Data Protection Regulation ("GDPR").

1. Identity of the Data Controller

Pursuant to KVKK and GDPR, your personal data may be processed by Datazza Bilişim A.Ş. ("Company") within the scope described below.

  • Address: Nidakule Ataşehir Batı 1/2, Barbaros Mah., Ataşehir, Istanbul, Türkiye
  • Mersis No: 0271206766800001
  • Email: legal@datazza.com

2. Purpose of Processing Personal Data

Your collected personal data will be processed for the following purposes based on the personal data processing conditions specified in Articles 5 and 6 of the KVKK:

  • Carrying out the necessary work by our business units to benefit you from the products and services offered by our Company;
  • Ensuring the legal and commercial security of our Company and those who have a business relationship with our Company;
  • Determining and implementing our Company's commercial and business strategies;
  • Execution of information security processes;
  • Execution of finance and accounting transactions;
  • Follow-up of legal affairs and contract management.

3. To Whom and For What Purpose the Processed Personal Data May Be Transferred

Your processed personal data may be transferred to our business partners, suppliers, shareholders, legally authorized public institutions, and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK and relevant articles of GDPR.

Note on Cloud Services: As a technology company, we utilize global cloud infrastructure (e.g., AWS, Azure, Google Cloud). Therefore, technical data may be processed on secure servers located outside of Türkiye, in compliance with necessary cross-border data transfer regulations.

4. Method and Legal Reason for Personal Data Collection

Your personal data is collected electronically via our website, email, and other digital channels ("cookies," "contact forms"). This data collection is based on the following legal grounds set forth in Article 5 of the KVKK:

  • It is clearly provided for by the laws;
  • It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract (e.g., providing our software services);
  • It is mandatory for the data controller to fulfill its legal obligation;
  • It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. Rights of the Data Subject

As a data subject, you have the following rights under Article 11 of the KVKK and relevant articles of the GDPR:

Access & Correction

To learn whether your personal data is processed, to request information if processed, and to request correction of incomplete or inaccurate data.

Deletion & Destruction

To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the law.

Objection

To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.

Compensation

To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

6. Application to the Data Controller

You may submit your requests regarding your rights listed above to our Company in writing or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to our Company.

For Legal Inquiries

legal@datazza.com

Postal Applications

Datazza Bilişim A.Ş.
Ataşehir, Istanbul

Your application will be answered free of charge within thirty (30) days at the latest depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.