T-RUPT TEKNOLOJİ A.Ş.
WEBSITE CONTACT FORM
PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

Prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698.

Introduction

This Privacy Notice has been prepared by T-Rupt Teknoloji A.Ş. (the “Company” or the “Data Controller”) in order to inform you, within the scope of the obligation to inform set forth under Article 10 of the Personal Data Protection Law No. 6698 (“Law” or “KVKK”), about the purposes and legal grounds for processing the personal data you share through the contact form available on the website operated by the Company, as well as your rights in this regard.

The Company does not accept direct job applications through its website and does not permit the upload of résumés/CVs. Recruitment processes are conducted through the kariyer.net platform, and any data submitted through the contact form on the website is not evaluated within the scope of recruitment or candidate assessment processes. This Privacy Notice applies solely to personal data processed through the contact form.

1. Identity of the Data Controller

Your personal data is processed by T-Rupt Teknoloji A.Ş., acting in its capacity as the 'Data Controller' as defined under Article 3 of the Law.

2. Personal Data Processed

In the event that you complete the contact form available on our website and send a communication to us, only the following personal data will be processed:

We would like to emphasize that you should refrain from entering excessive personal data, including special categories of personal data (such as health information, religious beliefs or membership information), that are unrelated to your request in the free-text message field of the contact form. Not sharing data that is not necessary for the evaluation of your request is a requirement of the principle of being 'relevant, limited and proportionate to the purpose for which they are processed' set forth under Article 4 of the Law.

3. Purposes of Processing and Legal Basis

The personal data specified above is processed in accordance with the general principles set forth in Article 4 of the Law and the data processing conditions stipulated under Article 5 thereof, for the following purposes and legal grounds:

The personal data you share through the contact form is processed on the basis of the personal data processing conditions set forth under Article 5 of the Law for the purposes of receiving, evaluating and responding to your requests and contacting you. Accordingly, no separate explicit consent is sought for such processing activities.

4. Transfer of Personal Data

As a rule, your personal data processed through the contact form is not shared with third parties. However, your personal data may be transferred, in compliance with Article 8 of the Law and only to the extent necessary, in the following circumstances:

• To service providers acting as data processors on our behalf, solely to the extent required for the provision of website operation, technical infrastructure, maintenance and security services, as well as e-mail and information technology services.

• To competent public institutions and organizations and judicial/administrative authorities, upon request and to the extent required by applicable legislation, for the fulfilment of legal obligations or the protection of legal rights.

As a rule, your personal data is not transferred abroad. However, where information technology infrastructures or server systems used by the Company are located abroad, personal data may be transferred in compliance with Article 9 of the Law, provided that an adequacy decision exists for the recipient country or that the appropriate safeguards prescribed by law (such as undertakings, standard contractual clauses, etc.) are duly implemented.

5. Method of Collection of Personal Data

Your personal data is collected electronically and through fully automated means when you complete and submit the contact form available on our website. Such data is processed on the legal grounds specified under Section 3 of this Privacy Notice.

6. Retention Period of Personal Data

Your personal data shall be retained for the period required by the purpose of processing and for the limitation periods prescribed by applicable legislation or required by the relevant purpose of processing. Upon expiry of such periods, your personal data shall be deleted, destroyed or anonymised in accordance with Article 7 of the Law and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

7. Your Rights as a Data Subject

Pursuant to Article 11 of the Law, you may submit a request to the Company and exercise the following rights:
(a) to learn whether your personal data is processed;
(b) to request information if your personal data has been processed;
(c) to learn the purpose of processing and whether the data is used in accordance with such purpose;
(d) to learn the third parties to whom your personal data is transferred domestically or abroad;
(e) to request correction of incomplete or inaccurate personal data;
(f) to request deletion or destruction of personal data under the conditions set forth in Article 7 of the Law;
(g) to request notification of correction, deletion or destruction operations to third parties to whom personal data has been transferred;
(h) to object to any result arising against you through the exclusive analysis of processed data by automated systems;
(i) to claim compensation for damages incurred due to the unlawful processing of personal data.

8. Application Procedure

You may submit your requests regarding the above rights, together with information verifying your identity, to the Company through one of the methods specified below in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• By submitting a wet-ink signed petition in person or through a notary public to the Company’s address specified above;

• Through a registered electronic mail (KEP) address, secure electronic signature or mobile signature to the Company’s KEP address;

• Through the e-mail address previously notified to and registered with the Company.

Your request will be concluded free of charge as soon as possible and in any event within thirty (30) days. However, where the process requires an additional cost, the fee determined by the Personal Data Protection Board may be charged. Your request may be accepted and fulfilled or rejected with justification. If your request is rejected, if you find the response insufficient, or if no response is provided within the prescribed period, you may file a complaint with the Personal Data Protection Board within thirty (30) days from the date you learn of the response and, in any event, within sixty (60) days from the date of your application.

9. Amendments to the Privacy Notice

The Company reserves the right to amend and update this Privacy Notice at any time in line with changes in legislation and updates to its data processing activities. The current version of the Privacy Notice shall be made available on the Company’s website.

Acknowledgement

☐ I have read and understood the T-Rupt Teknoloji A.Ş. Website Contact Form Privacy Notice regarding the Processing of Personal Data.

(This acknowledgement merely confirms that the information obligation has been fulfilled and does not constitute an explicit consent.)