Personal Data Terms

Clarification Text (GDPR)

This Clarification Text has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data ("Law"), in cases where Ergineer Yazılım Ticaret Limited Şirketi acts in the capacity of Data Controller, to inform real persons ("Data Subject") regarding the processes, methods, and purposes of collecting, processing, storing, protecting, and destroying their personal data, as well as their rights under the Law and the methods for exercising these rights.

1. For What Purposes Do We Process Your Personal Data?

As the Data Controller, we may process your personal data in accordance with the articles of the Law for the following purposes:

• Negotiation, execution, and performance of contracts,
• Provision of products and services,
• Customizing products and services according to requests; updating and developing them due to customer needs, legal and technical developments,
• Defining user credentials in systems specific to products and services provided,
• Providing call center and remote support services, tracking call volume and content,
• Announcing new or existing products, services, and campaigns, carrying out sales and marketing activities,
• Conducting market research,
• Generating statistics and analyzing usage,
• Payment and collection of product, service, and fee costs, choosing collection methods,
• Establishing contact/communication,
• Managing commercial relationships with partner companies, suppliers, resellers, and service providers,
• Reporting within the framework of cooperation,
• Evaluating partnership application processes of resellers,
• Developing commercial strategies and making company plans,
• Contacting for satisfaction measurement surveys by Ergineer Group Companies,
• Providing discounts on purchases made from contracted websites and institutions,
• Creating participant registrations for events/trainings organized by Ergineer Group Companies, issuing certificates/attendance documents, determining prize/gift winners and delivering awards/gifts,
• Managing judicial/administrative processes, responding to requests from public institutions, fulfilling legal obligations under regulations, resolving legal disputes,
• Managing investor relations,
• Ensuring the legal outcomes arising from company mergers, demergers, or partial/full transfers,
• Promoting Ergineer Group Companies employees, Real Person Resellers/Customers, and Reseller/Customer Contacts in social media posts,
• Conducting job interviews and evaluating employment applications,
• Establishing, executing, and terminating employment relationships/contracts,
• Providing primary and fringe benefits arising from employment contracts to Ergineer Group Companies employees, evaluating performance and work,
• Creating user accounts for employees, issuing internal ID and meal cards,
• Organizing transportation for company employees, tracking company pool vehicles,
• Creating participant records in case of attendance at an organization on behalf of the company,
• Creating records of employee training participation and certifications,
• Creating and tracking visitor logs,
• Ensuring internal and perimeter security of the company, as well as the security of the Website and Applications,
• Analyzing Website usage,
• Creating personal data inventory,
• Evaluating and answering all questions, requests, suggestions, complaints, and applications submitted in writing, verbally, or electronically, including those regarding personal data.

2. To Whom and For What Purposes Do We Transfer Your Processed Personal Data?

Your personal data may be transferred to the third parties listed below, located in Türkiye or abroad, within the scope of the purposes specified in Section 1 above and in accordance with the Law and other mandatory legal provisions in force regarding personal data:

3. What Are Our Personal Data Collection Methods and Legal Grounds?

We may collect and process your Personal Data through written, verbal, electronic means, audio/video recording, or physical face-to-face meetings, in accordance with the Policy, the Law, and relevant legislation.

Our data collection process may occur through:

1. Digital channels or software, including the Website, mobile applications, email, and recruitment portals;
2. Contracts, applications, forms, call center, remote support, sales and marketing units, cookies on Websites, business cards, and telephone; or
3. Face-to-face meetings conducted with the Data Subject.

4. What Are Your Rights as a Data Subject?

In accordance with Article 11 of the Law, by applying to our Company, you have the right to:

• Learn whether your personal data is processed or not,
• Request information if your personal data has been processed,
• Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom your personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed, and request notification of this operation to third parties to whom the data was transferred,
• Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite having been processed in accordance with the Law and other relevant provisions, and request notification of this operation to third parties to whom the data was transferred,
• Object to the occurrence of a result against yourself by analyzing the processed data exclusively through automated systems,
• Request compensation for damages in case you suffer damage due to unlawful processing of personal data.

However, pursuant to Article 28/2 of Law No. 6698, you cannot exercise the above rights (except the right to claim compensation for damages) in the following cases:

• Processing is necessary for the prevention of committing a crime or for a criminal investigation.
• Processing of personal data made public by the Data Subject themselves.
• Processing is required for execution of supervision or regulation duties, or disciplinary investigation/prosecution by authorized public institutions and professional organizations.
• Processing is necessary for the protection of economic and financial interests of the State concerning budget, tax, and financial matters.

If you wish to exercise your rights, you can fill out the application form in Turkish and transmit your requests to our Company in writing or via registered electronic mail (KEP), secure electronic signature, mobile signature, or using your electronic mail address previously notified to our Company and registered in our systems.

When applying to our Company to exercise your rights, you may choose one of the following methods:

• By Mail: Send a written application to İlkbahar mah. Sinpaş Altınoran 23/29 Çankaya, Ankara, Türkiye.
• By Email: Send an email containing your request to kvkk@ergineer.com.tr using your registered email address in our system.
• You may also submit your requests via other methods specified in the Communiqué on the Principles and Procedures for Application to the Data Controller.