Privacy Policy

1. Introduction

This Privacy Policy sets out the principles and procedures governing the processing of personal data collected by CoreDefence (also referred to as the "Company" or "we") through the www.coredefence.com.tr website and its associated services.

Our Company takes the utmost care to protect personal data within the framework of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the European Union General Data Protection Regulation ("GDPR") and the related secondary legislation.

2. Identity of the Data Controller

Pursuant to Article 3 of the KVKK, our Company acts as the "data controller" that determines the purposes and means of processing personal data.

3. Personal Data We Collect

• Identity data: First name, surname, national ID number (only where a contractual relationship exists)
• Contact data: Email address, postal address, company name and title
• Digital data: IP address, browser type and version, operating system, pages visited, date and time of visit
• Cookie data: Session cookies, preference cookies

4. Purposes of Processing

• Delivering and operating cyber security services
• Managing contractual processes and fulfilling legal obligations
• Planning and executing information security processes
• Tracking and resolving requests and complaints
• Meeting the record-keeping, reporting and disclosure obligations required by law
• Providing information to authorised public institutions as required by legislation

5. Legal Basis

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Your explicit consent (KVKK art. 5/1)
• Where expressly provided for by law (KVKK art. 5/2-a)
• Where directly related to the formation or performance of a contract (KVKK art. 5/2-c)
• Where necessary for the data controller to fulfil a legal obligation (KVKK art. 5/2-ç)
• Where processing is necessary for the legitimate interests of the data controller (KVKK art. 5/2-f)

6. Transfer of Data

Pursuant to Articles 8 and 9 of the KVKK, your personal data may be transferred to the following parties:

• Authorised public institutions and bodies, within the scope of legal obligations
• Business partners and suppliers where required for service delivery
• Competent judicial authorities in the event of a dispute

International transfers are carried out within the framework of KVKK art. 9 and the decisions of the Personal Data Protection Board.

7. Cookie Policy

• Strictly necessary cookies: Required for the website to function properly.
• Performance cookies: Used to analyse site performance.
• Functionality cookies: Used to remember user preferences.

You can disable cookies through your browser settings; note that some features may not work correctly if you do.

8. Data Security Measures

Pursuant to Article 12 of the KVKK, the following technical and organisational measures are in place:

• An access authorisation matrix for data, with access logging
• Use of secure communication channels (TLS 1.3)
• Regular security testing of systems that hold personal data
• Established data breach notification procedures
• Training employees on the protection of personal data

9. Retention Periods

Your personal data is retained for as long as the purposes of processing require and within the applicable statutory limitation periods. Once the purpose no longer applies and the legal retention period expires, your data is deleted, destroyed or anonymised.

10. Rights of the Data Subject

Under Article 11 of the KVKK you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether the data is used in line with that purpose
• To know the third parties, in Türkiye or abroad, to whom your data has been transferred
• To request correction if your personal data has been processed incompletely or inaccurately
• To request erasure or destruction of your personal data within the framework of KVKK art. 7
• To object to an outcome to your detriment arising from analysis carried out solely by automated systems
• To claim compensation if you suffer damage due to unlawful processing

To exercise your rights, you may apply in writing to info@coredefence.com.tr. Applications are concluded within 30 days at the latest.

11. Policy Updates

This Privacy Policy may be revised in line with legislative changes or updates to Company practice. The current version will always be published on this page.