Personal Data Protection Notice

Last updated: July 2026

1. Data Controller

This notice has been prepared by Thinksoft Bilgi Sistemleri Yazılım ve Danışmanlık Hizmetleri ("Thinksoft", the "Company") as data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.

• Address: Gebze T.U. Technopark, Cumhuriyet Mahallesi Şişecam Sk. No: 44, Gebze / KOCAELİ
• E-mail: [email protected]
• Phone: +90 533 897 82 11

2. Personal Data Processed

When you fill out the quote/contact forms on our website, the following personal data may be processed:

• Identity and contact information: full name, company/organization name, e-mail address, phone number.
• Request content: the solution you are interested in and the information you share in your message.
• Transaction security data: technical records relating to the form submission (e.g. time of submission).

3. Purposes of Processing Personal Data

• Receiving and responding to your quote, demo and support requests,
• Communicating with you and concluding your request,
• Providing information about our products and services,
• Carrying out contract processes and fulfilling our legal obligations.

4. Legal Grounds for Processing Personal Data

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: being directly related to the establishment or performance of a contract, the data controller's fulfilment of a legal obligation, legitimate interest provided that it does not harm the fundamental rights and freedoms of the data subject, and, where necessary, explicit consent.

5. Transfer of Personal Data

Your personal data may be transferred, only to the extent necessary to achieve the purposes above, to the business partners and suppliers we receive services from (e.g. e-mail/infrastructure service providers) and to authorized public institutions and organizations, in accordance with the conditions in Articles 8 and 9 of the KVKK. Your data is not sold to third parties for marketing purposes.

6. Method of Collecting Personal Data

Your personal data is collected through electronic channels such as the quote/contact forms on our website, e-mail and phone, by automated or non-automated methods.

7. Retention Period

Your personal data is kept for as long as necessary for the purpose for which it is processed and for the statute-of-limitations/retention periods stipulated in the relevant legislation; at the end of the period it is deleted, destroyed or anonymized.

8. Rights of the Data Subject (KVKK Art. 11)

Under Article 11 of the KVKK, as a data owner you have the following rights:

• To learn whether your personal data is being processed and, if so, to request information about it,
• To learn the purpose of processing and whether it is used in accordance with that purpose,
• To know the third parties to whom it is transferred domestically or abroad,
• To request correction if it has been processed incompletely or incorrectly,
• To request its deletion or destruction within the conditions set out in the KVKK,
• To request that these actions be notified to third parties to whom the data has been transferred,
• To object to a result arising against you as a result of analysis by automated systems,
• To request compensation if you suffer damage due to unlawful processing.

9. Application Method

You can submit your requests regarding the rights above, together with information verifying your identity, by e-mail to [email protected] or in writing to the address stated above. Your request will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature; if the process requires an additional cost, the fee in the tariff determined by the Board may be charged.