1. Purpose of the Information Notice
This notice is prepared to inform you, under Article 10 of KVKK (Law No. 6698), about the processing of personal data of Yamanlar Bilişim Sanayi ve Ticaret Limited Şirketi's customers and customer representatives.
2. Personal Data Processed
Within the scope of our customer relationship, personal data in the following categories is processed:
| Category | Data Type |
|---|---|
| Identity | First name, last name, Turkish ID number (when required by contract) |
| Contact | E-mail, phone, address |
| Customer Transaction | Contract information, service scope, request and complaint records, support ticket content, payment information |
| Finance | Invoice information, tax number, payment date |
| Personnel (HR) | Customer representative's title, role, department, business phone and business e-mail |
| Transaction Security | Customer portal access logs, IP, session information |
| Visual / Audio Recording | Photographs or recordings that may be taken during on-site support (only with explicit consent) |
3. Purposes of Processing
Within the scope of our customer relationship, your personal data is processed for the following purposes:
- Conducting the processes of establishing, performing, and terminating the service contract
- Carrying out service delivery, installation, maintenance, and technical support activities
- Managing customer identification, account creation, and authorization processes
- Managing the customer portal, ticketing, and remote support infrastructure
- Carrying out invoicing, collection, and accounting processes
- Evaluating and responding to customer requests, complaints, and questions
- Measuring service quality, evaluating customer satisfaction, and carrying out improvement activities
- Detecting and preventing information security, system security, and cyber threats
- Carrying out backup, disaster recovery, and business continuity processes
- Preparing technical reports, monitoring, performance analyses, and customer reports
- Resolving contractual disputes and conducting legal proceedings
- Fulfilling legal obligations (book/record retention under Tax Procedure Law No. 213, logging under Law No. 5651, record-keeping under KVKK)
- Providing information to authorized public authorities and responding to official requests
- Conducting internal audit, reporting, and risk management activities
4. Legal Basis
Under Article 5/2 of KVKK:
- Establishment and performance of a contract (subpara. c) — service contract
- Legal obligation (subpara. ç) — tax, accounting, Law No. 5651
- Establishment, exercise, or protection of a right (subpara. e) — collection, dispute resolution
- Legitimate interest (subpara. f) — service quality, audit
5. Transfer
Within the scope of providing the service and our legal obligations:
- Domestically: To authorized public authorities within the scope of legal obligations, to financial advisors and lawyers, and to infrastructure providers supporting our service delivery
- Internationally: To infrastructure providers based in European Union member states and to countries declared by the KVK Board to provide adequate protection; other transfers require your explicit consent
6. Retention Period
| Data | Period |
|---|---|
| Customer contract and all related data | 10 years after the contract ends (Turkish Code of Obligations statute of limitations) |
| Invoice and accounting records | 10 years (Tax Procedure Law No. 213) |
| Support / ticket content | Contract term + 5 years |
| Customer portal access logs | 2 years (Law No. 5651 legal minimum) |
7. Your Rights
For your rights under Article 11 of KVKK, please review the Data Subject Application Procedure or send your application to kvkk@yamanlarbilisim.com.tr.
Effectiveness and updates: This text is in effect as of 28 April 2026 . Yamanlar Bilişim may update this text when deemed necessary; the updated version takes effect on the date it is published on our website.
Contact: You may send your KVKK-related applications to kvkk@yamanlarbilisim.com.tr or via yamanlarbilisim@hs06.kep.tr (KEP, Turkey's registered e-mail). For the detailed application procedure, please see the Data Subject Application Procedure page.