KVKK Privacy Notice

1. Data Controller: Buyasoft Bilişim A.Ş. (Istanbul, Türkiye)

2. Categories of Personal Data Processed
Registration and contact data: name, surname, email, phone, job title, etc.
Technical data: IP address, device, usage and cookie data.

3. Purposes of Processing
Providing our services and communicating with you
Performing contracts, handling requests and meeting legal obligations
Keeping our systems running, technical support and marketing

4. Legal Bases
Your explicit consent
Performance of a contract
Compliance with our legal obligations
Our legitimate interests (system security, maintenance, etc.)

5. Recipients of Personal Data
Service providers (payments, hosting, analytics, etc.)
Administrative or judicial authorities authorized by law
Business partners we work with, subject to your consent

6. Transfers Within and Outside Türkiye
Data is mainly processed in Türkiye. Any transfer abroad is carried out in accordance with the law and applicable regulations.

7. Retention Period
Data is kept for as long as needed for its purpose, in line with contractual and statutory retention periods.

8. Your Rights (Article 11 of the KVKK)
You have the right to:
Find out whether your personal data is processed
Request information if it has been processed
Learn the purpose of processing and whether it is used accordingly
Know the third parties in Türkiye or abroad to whom your data has been transferred
Ask for incomplete or inaccurate data to be corrected
Ask for your data to be erased or destroyed under the KVKK
Object if you believe your data is processed unlawfully or in breach of contract
Ask for any correction or erasure to be notified to third parties who received your data
Object to an outcome against you that results solely from automated processing
Be informed of the outcome of your request

9. How to Make a Request
Send your request in writing — by email, by registered mail, or by hand delivery to our head office. We will respond within the time limits set by the KVKK.

10. Notice and Consent
We tell you clearly how your data will be processed when you register, submit a form or first use our services.
Where consent is required, we ask for it explicitly and you are free to give or refuse it.