1. Data controller
[COMPANY LEGAL NAME] (“CM Apps”), [ADDRESS], MERSİS: [MERSİS NO], email: [EMAIL]. Your personal data is processed in the capacity of data controller within the scope described below.
2. Personal data processed and purposes
Your identity and contact data is processed for the purposes of preparing quotations, forming and performing contracts, managing customer relations, issuing invoices and fulfilling legal obligations. Your transaction security data (IP, log records) is processed to ensure information security and to meet obligations under Law No. 5651. Your marketing data is processed, where you have given explicit consent, for the promotion of products and services.
3. Method of collection and legal basis
Your data is collected through website forms, email, telephone, product interfaces and our business partners, in electronic or physical form, on the legal bases of KVKK Art. 5/2-c (performance of a contract), Art. 5/2-ç (legal obligation), Art. 5/2-f (legitimate interest) and, where necessary, Art. 5/1 (explicit consent).
4. Disclosure
Your data may be disclosed to competent public institutions and bodies within the scope of legal obligations, and to the hosting, accounting and communication suppliers whose services we use, in accordance with the conditions in KVKK Art. 8 and Art. 9. Transfers to servers or suppliers located abroad are carried out under an adequacy decision announced by the Board, standard contractual clauses or your explicit consent.
5. Your rights
Under KVKK Art. 11, you have the right to learn whether your personal data is being processed, to request information if it has been processed, to learn whether it is used in accordance with its purpose, to know the third parties to whom it is disclosed, to request rectification if it is incomplete or inaccurate, to request its erasure or destruction, to request that these operations be notified to the third parties to whom the data has been disclosed, to object to a result against you produced by analysis through automated systems, and to claim compensation if you suffer damage.
You may submit your requests in writing to [ADDRESS] or via [KEP ADDRESS] / [EMAIL], in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are concluded free of charge within 30 days at the latest.