1. What we need

Our Personal Data Protection Policy governs the use and storage of your data. You can see our Personal Data Protection Policy at [Link].

OPTİYOL KARAR DESTEK TEKNOLOJİLERİ A.Ş. is a Controller of the personal data you (data subject) provide us. We collect the following types of personal data from you:

1.1. For the personal data of the service buyer, supplier or their personnel/representatives/shareholders:

• Name Surname
• National Identity Number/Social Security Number
• Telephone number
• E-mail address
• Social media accounts
• Business/Billing address
• Location
• Signature
• IBAN

1.2. For the personal data of the potential service recipient and supplier or their personnel/representatives/shareholders:

• Name Surname
• National Identity Number/Social Security Number
• Telephone number
• E-mail address
• Social media accounts
• Business/Billing address
• Location

1.3. For the personal data of online visitors:

• Name Surname
• E-mail address
• Social media accounts
• Nicknames
• IP number
• Location
• Browser data

 

1.4. For the personal data of public officials dealing with the company on behalf of public institutions:

• Name Surname
• Telephone number
• E-mail address
• Business address

 

2. Why we need it

We need your personal data in order to provide you with the following services:

 

• 1. For the personal data of the service buyer, supplier or their personnel/representatives:
• Fulfillment of obligations arising from the law and other legislation,
• Fulfillment of goods / services trading activities,
• Performance of mutual obligations arising from contracts,
• Execution of goods / services after-sales support services
• Evaluation of complaints and requests.

 

• 2. For the personal data of the potential service recipient and supplier or their personnel/representatives:
• Execution of advertising and campaign processes,
• Execution of product and service marketing processes,
• Evaluation of complaints and requests.

 

• 3. For the personal data of online visitors:
• Execution of information security processes,
• Evaluation of complaints and requests,
• Informing the authorized institutions and organizations,
• Carrying out communication activities.

 

• 4. For the personal data of public officials dealing with the company on behalf of public institutions:
• Carrying out the activities in accordance with the relevant legislation,
• Informing authorized persons and institutions.
   

3. What we do with it

Your personal data is processed in Teknopark İstanbul Sanayi Mahallesi, Teknopark Bulvarı, No:1/2C 2110, Pendik, İstanbul, Turkey Postal Code: 34906 located in Turkey. Hosting and storage of your data takes place in Amazon Web Services which is located in Ireland and the United States of America.

No third party providers have access to your data, unless specifically required by law.

4. How long we keep it

Under [Jurisdiction] law, we are required to keep your documents for 3 years according to the Data Retention Policy. After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information. Please see Data Retention Policy for more information on our personal data retention schedule.

5. What are your rights?

Should you believe that any personal data we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted. Please contact us via data subject consent form. 

In the event that you wish to complain about how we have handled your personal data, please contact Data Protection Representative at e-mail niedermeier@cyberlegis.io or in writing at CYBERLEGIS RA GmbH, Robert Niedermeier, Maximilianstrasse 13, 80539 Munich, Germany, mobile +49 (0)171 2440099, phone +49 (0) 89 203 00 64 22, fax +49 (0) 89 203 00 64 50. Our DPR will then look into your complaint and work with you to resolve the matter.

If you still feel that your personal data has not been handled appropriately according to the law, you can contact Data Protection Authority and file a complaint with them.