KVKK Disclosure Notice

Data Controller: Digidrom · Address: Antalya Kemer Atatürk Mah. · Email: [email protected]

Pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), we process your personal data within the framework described below. This disclosure applies to your inquiries, our contractual relationships and activities carried out via our website.

1. Categories of Personal Data

• Identity: name, surname
• Contact: email, phone, address
• Customer transactions: quotes, contracts, invoices
• Financial: payment and IBAN details
• Security: IP address, logs, browser/device info, cookies
• Marketing: subject to consent — preferences and communication history

2. Collection Methods

• Website contact and quote forms
• Email and phone communication
• Contracts and other written channels
• Website cookies and analytics tools
• Third-party partners (only with your consent)

3. Purposes of Processing

• Managing contractual relationships,
• Evaluating quotes, orders and support requests,
• Invoicing, collection and accounting processes,
• Compliance with legal obligations,
• Information security management,
• Marketing, campaigns and events (with consent),
• Service quality measurement and improvement.

4. Legal Basis

Your data is processed under KVKK Arts. 5/2 and 6/3 based on:

• Necessity for contract formation or performance,
• Compliance with a legal obligation,
• Legitimate interest of the controller, provided it does not harm your fundamental rights,
• Expressly provided for by law,
• Your explicit consent.

5. Transfers

Under KVKK Arts. 8 and 9, your data may be transferred — strictly limited to the purpose — to:

• Authorised public bodies (upon lawful request),
• Hosting, email and cloud infrastructure providers,
• Accountants, legal counsel and independent auditors,
• Business partners (only with your explicit consent).

6. Retention Periods

• Commercial books and invoices: 10 years (Turkish Tax Procedure Law)
• Contracts: 10 years after end of legal relationship
• Communication records: 2 years
• Server logs: 1 year
• Marketing consents: until withdrawn, max 3 years

7. Your Rights (KVKK Art. 11)

1. Learn whether your data is processed,
2. Request information if so,
3. Learn the purpose and conformity with that purpose,
4. Know third-party recipients, domestic or foreign,
5. Request correction if incomplete or incorrect,
6. Request deletion or destruction,
7. Request notification of third parties about correction/deletion,
8. Object to adverse automated decisions,
9. Claim compensation for damages.

8. How to Apply

Under KVKK Art. 13, in writing, by secure e-signature, mobile signature or registered e-mail (KEP):

• Email: [email protected]
• Post: Antalya Kemer Atatürk Mah.

Your request is answered within 30 days, free of charge; if a separate cost is incurred, the tariff set by the Board applies.

9. Updates

This disclosure may be updated in line with legislation and operations. The current version is always published on this page.