Data Protection Notice

As CoreDefence, we are informing you about the processing of your personal data pursuant to Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform.

1. Identity of the Data Controller

2. Personal Data Processed and Purposes of Processing

The following categories of personal data are processed for the purposes set out beside each of them:

3. Transfer of Personal Data

In accordance with the conditions set out in Articles 8 and 9 of the KVKK, your personal data may be transferred as follows:

• Domestic transfer: To authorised public institutions and judicial authorities where legally required, and to business partners and suppliers for the purpose of service delivery
• International transfer: Under KVKK art. 9, to countries offering adequate protection or where adequate protection is undertaken, and only to the extent required by processing activities

4. Method of Collection and Legal Grounds

Your personal data is collected by the following means:

• Automatically during website visits (cookies, server logs)
• When you contact us directly by email
• Through information you provide under service contracts

The legal grounds for processing your personal data are:

• KVKK art. 5/2-a: Where expressly provided for by law
• KVKK art. 5/2-c: Where directly related to the formation or performance of a contract
• KVKK art. 5/2-ç: Where necessary for the data controller to fulfil a legal obligation
• KVKK art. 5/2-e: Where processing is necessary for the establishment, exercise or protection of a right
• KVKK art. 5/2-f: Where processing is necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject

5. Rights of the Data Subject

Under Article 11 of the KVKK, as a data subject you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether the data is used in line with that purpose
• To know the third parties, in Türkiye or abroad, to whom your data has been transferred
• To request correction if your personal data has been processed incompletely or inaccurately
• To request erasure or destruction of your personal data within the framework of KVKK art. 7
• To request that correction, erasure and destruction operations be notified to the third parties to whom the data was transferred
• To object to an outcome to your detriment arising from analysis carried out solely by automated systems
• To claim compensation if you suffer damage due to unlawful processing of personal data

6. How to Apply

You may exercise the rights listed above by applying through the following channels:

Pursuant to Article 13 of the KVKK, applications are concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. Where the process incurs an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

7. Updates to This Notice

This notice may be updated in line with legislative changes and the decisions of the Personal Data Protection Board. The current version will always be published on this page.