Information Notice on the Protection and Processing of Personal Data

1. DATA CONTROLLER

Your personal data may be processed by KONDA Araştırma ve Danışmanlık A.Ş. (“Company”) in its capacity as data controller, within the scope explained below, pursuant to the Personal Data Protection Law No. 6698 (“Law”).

2. PURPOSE OF PROCESSING YOUR PERSONAL DATA

Your personal data collected may be processed by the Company in accordance with the fundamental principles stipulated in the Law and within the conditions and purposes of personal data processing specified in Articles 5 and 6 of the Law, for the purposes listed below:

1. Processing traffic information of data subjects (IP address, service start and end date, type of service used, amount of data transferred, and subscriber identity information) pursuant to applicable legislation,

2. Carrying out membership procedures,

3. Improving the services/contents offered, developing new services/contents, and informing data subjects who have provided consent for commercial electronic messages,

4. Analyzing the preferences and interests of data subjects with commercial electronic message consent and providing personalized services/content suggestions,

5. Conducting direct marketing, digital marketing, remarketing, targeting, profiling, and analysis in line with the Cookie Policy to promote and market applications, products, and services tailored to data subjects’ preferences and interests,

6. Carrying out promotional and marketing activities, conducting surveys and polls to obtain the opinions of data subjects, and ensuring customer satisfaction,

7. Resolving data subject issues and complaints,

8. Ensuring the complete execution of the Company’s operations and fulfillment of its legal obligations,

9. Informing data subjects about changes in legislation or in the rules and policies accepted by the Company,

10. Ensuring the security of electronic systems and physical environments owned or used by the Company, taking necessary measures by carrying out related assessments,

11. Conducting necessary work by business units to enable customers to benefit from the Company’s products and services,

12. Carrying out legal processes and ensuring compliance with legislation,

13. Responding to information requests from administrative and judicial authorities,

14. Planning internal reporting and business development activities,

15. Ensuring information and transaction security and preventing malicious use.

3. PERSONAL DATA TO BE PROCESSED

Depending on the legal relationship or transaction established with you, the following personal data may be processed:

1. Contact details you have shared with us and/or published on your website or other channels,

2. Your name and surname, postal address, date of birth, gender, phone and fax numbers, e-mail address, and other information you have shared with us,

3. Services you are interested in, services you request quotations for,

4. Browser used to access our website, referring website or application, and other information specified in our Cookie Policy,

5. IP, protocol, and communication records that must be retained pursuant to Law No. 5651,

6. Usage statistics such as subpages visited and time spent.

4. PARTIES TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRER

Your personal data collected may be transferred, in line with the fundamental principles stipulated in the Law and within the conditions of personal data processing specified in Articles 8 and 9 of the Law, to the parties listed below for the above-mentioned purposes:

1. To our business partners and suppliers, limited to the purpose of providing our products and services,

2. To consultants and audit firms for commercial, financial, and legal consultancy and audit purposes,

3. To subcontractors and third-party service providers involved in campaigns, promotions, and announcements,

4. To call centers and/or complaint management service providers for resolving customer complaints,

5. To authorized public institutions and judicial authorities, only where required by law and limited to its scope,

6. To social media platform owners that provide hosting or system services, for communications established through our website’s related social media accounts,

7. To other recipients for whom we have obtained your explicit consent, within the framework of your consent or the conditions stipulated by the Law.

5. METHOD AND LEGAL GROUNDS FOR COLLECTING YOUR PERSONAL DATA

Your personal data is collected by the Company through various channels and on different legal grounds. Within this process, your personal data is processed through our website and mobile applications for the purposes listed above. Personal data collected may be processed and transferred for the purposes set out in this Information Notice, within the conditions and purposes of processing personal data specified in Articles 5 and 6 of the Law.

6. YOUR RIGHTS AS DATA SUBJECT UNDER ARTICLE 11 OF THE LAW

We hereby inform you that, as a data subject, you have the following rights pursuant to Article 11 of the Law:

  1. To learn whether your personal data is processed,
  2. To request information if your personal data has been processed,
  3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
  4. To know the third parties to whom your personal data is transferred domestically or abroad,
  5. To request the rectification of your personal data if it is incomplete or incorrectly processed, and to request notification of such correction to third parties to whom your personal data has been transferred,
  6. To request the deletion or destruction of your personal data if the reasons requiring processing no longer exist, even if it has been processed in compliance with the Law and other relevant laws, and to request notification of such deletion or destruction to third parties to whom your personal data has been transferred,
  7. To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
  8. To request compensation if you suffer damage due to unlawful processing of your personal data.

To exercise your rights listed above, you may fill out the form available at www.konda.com.tr and submit your request, including necessary identity information and explanations regarding the right you wish to exercise, to “KONDA Araştırma ve Danışmanlık Yıldız Mah. Şair Naifi Sok. No:2 Beşiktaş / İstanbul” in person, send it through a notary public, or send a signed copy of the form to [email protected] via your registered electronic mail address with a secure electronic signature.

If the response contains personal data, in order to confirm that the recipient is indeed you, your identity will be verified when the response is delivered, unless the application is submitted in person or through a notary public. Your requests will be concluded free of charge as soon as possible and within no later than 30 days, depending on the nature of the request. However, if fulfilling your request incurs an additional cost, the fee determined in the tariff set by the Personal Data Protection Board will be charged. If the request is made on behalf of another person, a notarized power of attorney and other documents verifying your identity must be attached to the application.

Open Consent Declaration
Personal Data Storage and Destruction Policy
Corporate Personal Data Protection Policy
Data Subject Application Form