WEBSITE INFORMATION TEXT

1. WHAT IS THE PURPOSE AND SCOPE OF THE INFORMATION TEXT?

As Codit Teknoloji Ticaret Ltd. Şti. (“Codit Teknoloji” or “Organization”), we attach importance to the security and protection of your personal data that you share. Codit Teknoloji is a “data controller” in the cases specified in this text. We process your personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK” or “Law”), and we take appropriate, moderate and sufficient administrative and technical measures for the protection of your personal data. For more detailed information on the scope, context and approach to processing personal data as an organization, you can also review our Privacy Policy.

This disclosure text has been prepared to inform the visitors of the codit.com.tr site that we operate as Codit Technology, our customers who benefit from the services and the individuals who contact our organization through the site. The responsibility for the websites of third parties and organizations that we refer to or share information about on our website belongs to the operator and owner of the relevant site, not our organization.

2. WHAT ARE THE BASIC CONCEPTS REGARDING PERSONAL DATA?

Explicit consent: Consent based on information and expressed with free will regarding a specific subject

Anonymization: Making personal data in no way associable with an identified or identifiable natural person, even when matched with other data

Relevant person: Natural person whose personal data is processed

Personal data: Any information regarding an identified or identifiable natural person

Employee touching personal data: Employees who process the personal data of the relevant persons on behalf of the organization as required by their job description

Processing of personal data: Obtaining, recording, storing, preserving, changing, and rearranging personal data, in whole or in part, by automatic means or non-automatic means provided that it is part of any data recording system,

Any operation performed on data such as disclosure, transfer, acquisition, making available, classification or prevention of use

Board: Personal Data Protection Board

Institution: Personal Data Protection Institution

KVK: Personal Data Protection Law No. 6698

Special Personal Data: Data related to individuals’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data

Data processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller

Data recording system: Data processing according to certain criteria structured and processed recording system

Data controller: The natural or legal person who determines the purposes and means of processing personal data, and is responsible for the establishment and management of the data recording system

Joint data controller: Data controllers who use certain personal data jointly and carry out joint activities based on processing methods and purposes.

Independent data controller: The data controller who decides on the purposes and methods of processing personal data independently of any other data controller.

3. WHO ARE WE AS DATA CONTROLLERS?

Codit Teknoloji has the status of “Data Controller” towards the relevant natural persons in terms of personal data belonging to visitors to its websites and customers who benefit from the services it provides over the internet. Codit Technology, as the data controller, fulfills its obligations arising from the law and Board decisions by taking administrative measures and appropriate and moderate technical measures.

Our identity as the “Data Controller” and our contact information regarding personal data are as follows:

4. WHAT IS THE SCOPE OF OUR OBLIGATION TO INFORM?

Article 10 of Law No. 6698 imposes an obligation on data controllers to inform those whose personal data is processed. The obligation to inform includes being informed about your rights listed in Article 11 of the Personal Data Protection Law, the identity of the data controller, the purposes of processing personal data, the persons to whom the data is transferred, the purposes and methods of transfer, the legal reasons for collecting personal data, and personal data applications.

5. WHICH CATEGORIES OF PERSONAL DATA ARE PROCESSED?

We process the identity, communication, personal, transaction security and financial information of our website visitors, customers and those who communicate with us through our website.

6. FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?

Your personal data is processed on our websites and internet services in accordance with the principles of the Personal Data Protection Law;

• To conduct commercial activities,
• To ensure business continuity,
• To plan and execute business strategies,
• To make presentations, promotions and information,
• To promote and communicate via electronic channels,
• To conduct press relations,
• To inform the public,
• To conduct business relations,
• To share event visuals,
• To conduct sales and marketing transactions,
• To follow up on information, support and complaint requests,
• To operate internet services,
• To sell services,
• To conduct dealer transactions,
• To promote services/products,
• To manage services
  
  
• To manage intangible assets,
• To manage digital assets,
• To receive job applications,

7. IN WHAT WAY DO WE PROCESS AND PROTECT PERSONAL DATA?

We process your data in accordance with the principles listed in Article 4 of the Law and with your explicit consent, except for the compliance cases specified in Article 5. We collect your personal data verbally, in writing or electronically, through domestic and international means such as offices, websites and social media channels, with automatic or non-automatic methods.

The personal data of visitors and users are processed on the servers hosting our websites and internet services and on corporate fixed and mobile devices that we use for support, operation and development purposes.

All necessary technical and administrative measures are taken by Codit Technology to protect the personal data collected and to prevent it from falling into the hands of unauthorized persons and to prevent our customers and potential customers from being victimized, provided that they are appropriate and proportionate. Within this framework, we take care to ensure that our application, software and information systems comply with the standards and are kept up-to-date, that data transfer agreements are signed with the parties with whom data is shared, and that our Privacy Policy is complied with within the Organization.

8. WITH WHOM AND WHY DO WE SHARE PERSONAL DATA?

As Codit Technology, we transfer your personal data that we collect and process to organizations with which we have business relations in accordance with Article 8 of the Law, to organizations in Turkey and abroad that are service providers and solution partners from whom we benefit from administrative, legal and technical services, and to official institutions/organizations in cases of legal obligation. As a rule, you can access detailed information about how and with whom we share personal data domestically and abroad from our “Privacy Policy”. As a data controller, Codit Technology carries out the necessary checks to the extent possible to ensure that the institutions and organizations it shares data with fulfill their obligations arising from the Law, and binds the obligations with data transfer agreements.

8.1 What is the Nature and Scope of Domestic Sharing?

• Personal data may be shared within the scope of the purposes specified below;
• With domestic and foreign group companies, business partners, affiliates, consulting firms and similar service providers for the purpose of planning and carrying out commercial activities,
• With organizations providing services in this field for use in printed and visual media and internet media for promotional and marketing purposes,
• With organizations providing services in these fields for the planning and execution of business continuity, human resources, occupational health and safety and emergency processes and strategies;
• With private institutions and organizations such as business partners, consulting firms, suppliers and authorized authorities such as public institutions and organizations and judicial bodies in cases where it is necessary to fulfill its obligations arising from legal and judicial decisions,
• With banks, insurance companies, dealers and IT organizations providing services in this field for the purpose of electronic mail, customer management, accounting and human resources management,
• With organizations providing services in the field of IT for the purpose of providing infrastructure, application and security of IT systems are shared with organizations.

8.2. What is the Nature and Scope of Sharing Abroad?

Codit Technology shares personal data with service providers located abroad for the purposes of operating our website, developing services, conducting office work and transactions, providing services to users and visitors, ensuring their satisfaction, meeting their expectations, and establishing communication. In this context,

• For instant messaging, Whatsapp (Facebook) from the USA and,
• For video conferencing, Zoom and Google from the USA,
• For customer support and requests, Tawk.to from the USA,
• For file sharing, Google and Wetransfer from the USA,
• For remote access, Anydesk and Teamviewer from Germany,
• For mobile operating systems and accompanying services, Apple and Google from the USA,
• For social media services, Facebook, Twitter, Instagram, Youtube and Google from the USA are shared.
• For mail sending, SendinBlue from France is shared.
• For SSL certificate services, RapidSSL from the USA is shared.
• For SSL certificate services, TheSSLStore from the USA is shared. shared.
• Shared with Realtime Register, based in the Netherlands, for domain registrations.
• Shared with P.D.R Solutions, based in India, for domain registrations.

You can access each service provider's privacy policies via the following links:

• Microsoft (https://privacy.microsoft.com/en-us/privacystatement)
• Whatsapp (https://www.whatsapp.com/legal/client)
• Google (https://policies.google.com/privacy?hl=en-US)
• Wetransfer (https://wetransfer.com/legal/privacy)
• Anydesk (https://anydesk.com/en/privacy)
• Teamviewer (https://www.teamviewer.com/en/privacy-policy/)
• Facebook (https://www.facebook.com/policy.php)
• Twitter (https://twitter.com/en/privacy)
• Instagram (https://help.instagram.com/519522125107875)
• Linkedin (https://www.linkedin.com/legal/privacy-policy)
• Cloudflare (https://www.cloudflare.com/privacypolicy/)
• Tawk.to (https://www.tawk.to/privacy-policy/)
• Realtime Register (https://realtimeregister.com/other-products/privacy-protect/)
• P.D.R Solutions (https://www.endurance.com/privacy/privacy)
• Rapid Web Services (https://www.digicert.com/digicert-privacy-policy)
• SendinBlue (https://www.sendinblue.com/legal/privacypolicy/)

9. FOR WHAT LEGAL REASONS DO WE PROCESS PERSONAL DATA?

• The person's explicit consent,
• or based on the legal reason of "explicitly provided for in the law",
  • Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed Through These Publications,
  • Regulation No. 30035 on Internet Mass Use Providers dated 11/04/2017,
  • Turkish Code of Obligations No. 6098,
  • Within the scope of Turkish Commercial Code No. 6102 and similar laws, regulations, circulars,
• Based on the legal reason of “establishment or performance of the contract”; fulfillment of the requirements of the contract to which you are a party,
• Based on the legal reason of “ability of the data controller to fulfill its legal obligations”, fulfillment of legal obligations stipulated in the relevant legislation such as responding to the requests of courts and public institutions and organizations requesting information and documents,
• “Having been made public by the relevant person himself/herself”,
• Based on the legal reason of “establishment, exercise or protection of a right”, it is processed “without seeking explicit consent” based on the legal reasons of being a means of proof in possible disputes, and being able to receive legal consultancy and technical support.

10. WHAT ARE YOUR RIGHTS AS A DATA OWNER?

• As personal data owners, as listed in Article 11 of the KVK;
• Learn whether personal data has been processed,
• Request information about personal data if it has been processed,
• Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is processed incompletely or incorrectly and request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the KVK and other relevant laws and request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Object to a result that is detrimental to the person as a result of the analysis of processed data exclusively through automated systems
• You have the right to demand compensation in case of damages due to unlawful processing of personal data.

11. HOW CAN YOU APPLY TO GET INFORMATION?

You can obtain information about your rights and the application process within the scope of Article 11 of the Law "regulating the rights of the relevant person" on our Personal Data Owner Applications page and apply to us using the “Personal Data Owner Application Form” on the same page.