Personal Data Protection Policy

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), our company, acting as the Data Controller, will process your personal data within the framework explained below, in connection with business purposes, by using, recording, storing, updating, transferring, and/or classifying it. In this context, our company, in compliance with the Laws and Regulations established to protect personal data, particularly the right to privacy, aims to prevent the unlawful processing of your personal data, to prevent unauthorized access, and to ensure its security by taking all necessary technical and administrative measures to achieve an adequate security level.

The target audience of this text includes all individuals whose personal data is processed by our company, except for our employees and job applicants.

The personal data processed as the Data Controller, not limited to those listed here, include the following:

Name, surname, Turkish identity number, address, phone number, email address, signature, physical location/security video recording, call center/service quality voice recording, bank account number, cookie records.

Purposes and Legal Grounds for Processing Personal Data:

Your personal data shared by you will be processed for the following purposes:

• To benefit you and/or the institutions and organizations you represent from the products and services provided by our company,
• To determine and implement our company’s commercial and business strategies, perform marketing activities, business development, and planning activities, including but not limited to these,
• To conduct administrative operations for communication with our company,
• To ensure the physical security and supervision of our company’s locations,
• To establish relationships with business partners/customers/suppliers (authorized persons or employees),
• To fulfill the contractual requirements and financial reconciliation for the products and services provided together with our business partners, suppliers, or other third parties,
• To carry out our company’s human resources policies, to handle calls made to our call center or the use of our website,
• And/or to process in relation to participation in training, seminars, or organizations organized by our company.

Methods of Collection and Storage of Personal Data:

The personal data you share with us can be collected through both automated and non-automated methods, verbally, in writing, or electronically via offices, branches, call centers, websites, social media channels, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. Necessary business processes and technical security infrastructure are applied to ensure that the personal data obtained and stored by our company is protected from unauthorized access, manipulation, loss, and damage. Your personal data will be processed and stored with all necessary data security measures in place, only for the specified purposes and scope, and for the duration of the legal retention period or, if no such period is specified, for the duration required for the purpose of processing. Once this period has ended, your personal data will be deleted, destroyed, or anonymized in accordance with our company’s data flow.

Transfer of Personal Data:

Your personal data may be transferred, in compliance with Laws and other regulations, and for the purposes outlined, to:

• Yaz ve Yarat and group companies,
• Companies and representatives authorized by us to operate on behalf of our company,
• Regulatory and supervisory authorities, public institutions, or organizations authorized to request personal data under the applicable laws,
• Business partners, suppliers, contractors, banks, credit risk and financial institutions, and other natural or legal persons for the purposes outlined above,
• Tax and similar consultants, mandatory parties in legal follow-up processes, institutions, organizations, and auditors including third parties from whom we receive consulting services, and to domestic and foreign partners, third parties providing services, authorized persons, and organizations.

Your Rights Under Article 11 of KVKK:

By applying to our company, you have the right to:

• Learn whether your personal data is processed,
• Request information if your data has been processed,
• Learn the purpose of processing and whether it is being used in accordance with its purpose,
• Know the third parties to whom your personal data is transferred, domestically or internationally,
• Request correction if the data is incomplete or incorrect,
• Request deletion or destruction of your personal data in accordance with the conditions set out in Article 7 of KVKK,
• Request notification of the actions taken on your personal data to the third parties mentioned in (e) and (f),
• Object to the result of automated decision-making processes, and
• Request compensation for damages in case you suffer loss due to unlawful processing of your personal data.

According to the first paragraph of Article 13 of the KVKK, you may submit your request to exercise your rights in writing or via other methods determined by the Personal Data Protection Authority.

To exercise your rights, you may submit your request with necessary identity information and your application letter in person, via notary, or through other methods defined by the Personal Data Protection Authority, or send it securely with an electronic signature to info@raygo.com.tr.