Privacy notice on the protection of personal data

Identity of the data controller

The personal data covered by this notice is processed by HEM Bilişim, acting as data controller, within the scope described below.

Our head office address and email address are shown at the bottom of this page and on the contact page.

Categories of personal data processed

The following data categories may be processed in the activities we run through our website.

• Identity data: first name, surname
• Contact data: email address, phone number
• Professional data: your organisation, your role
• Transaction security data: IP address, form submission time
• Request content: the message and selections you submit in the form

Purposes of processing

The data above is processed solely for the following purposes.

• Responding to your contact and demo requests
• Providing information about the services and products we offer
• Recording and following up requests and complaints
• Ensuring information security and preventing misuse
• Fulfilling our legal obligations

Legal basis for processing

Your personal data is processed on the legal grounds set out in article 5 of the KVKK.

• Your explicit consent (art. 5/1) — contact and demo forms
• Direct relation to the conclusion or performance of a contract (art. 5/2-c)
• Compliance with a legal obligation of the controller (art. 5/2-ç)
• Legitimate interest, provided it does not harm your fundamental rights and freedoms (art. 5/2-f) — transaction security records

Transfer of personal data

Limited to the purposes above, your personal data may be transferred to the infrastructure and email providers we use, in accordance with the conditions in articles 8 and 9 of the KVKK.

Where a transfer abroad is required, it is carried out under the conditions set out in article 9 of the KVKK. Contracts are signed with service providers in their capacity as data processors.

Your personal data is never sold or transferred to third parties for marketing purposes.

Method of collection

Your personal data is collected electronically through the contact and demo request forms on our website, emails you send us directly, and the technical records of our site.

Retention period

Your personal data is retained for as long as the purpose of processing requires, taking into account the limitation periods set out in the relevant legislation. Once the period ends, the data is deleted, destroyed or anonymised.

After your request has been answered, contact records are kept for a reasonable period so they can serve as evidence in any future dispute.

Rights of the data subject

Under article 11 of the KVKK you have the following rights.

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know the third parties to whom it is transferred domestically or abroad
• To request rectification if it is incomplete or inaccurate
• To request erasure or destruction under the conditions in the law
• To request that rectification, erasure and destruction be notified to third parties to whom the data was transferred
• To object to a result against you arising from analysis exclusively by automated systems
• To claim compensation for damage suffered due to unlawful processing

How to apply

You may submit requests regarding these rights in writing, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or via registered electronic mail, or from the email address you have previously notified to us and which is registered in our system.

Your application is concluded as soon as possible and in any case within thirty days, depending on the nature of the request. You may use the form on our application page.