Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by KGEMTECH BİLİŞİM VE TEKNOLOJİ HİZMETLERİ ANONİM ŞİRKETİ (“Kgemtech” or the “Company”) as the data controller, within the scope described below.
1. Data controller
- Registered trade name: KGEMTECH BİLİŞİM VE TEKNOLOJİ HİZMETLERİ ANONİM ŞİRKETİ
- MERSIS number: 0549092265800001
- Address: Kirazlıtepe Mah. Ayvalık Çıkmazı Sk. No: 8/2 İç Kapı No: 2, Üsküdar / İstanbul, Türkiye
- E-mail: info@kgemtech.com
- Phone: +90 532 733 23 49
2. What personal data do we process?
The data we process depends on your relationship with the Company.
Website visitors
- Transaction security data: server logs such as IP address, date and time of the visit, pages viewed and browser information.
Our website has no membership, forms or cookies that track visitors. For details, see our Privacy and Cookie Policy.
People who contact us by phone or e-mail
- Identity: first and last name; for business enquiries, your company and job title.
- Contact: phone number, e-mail address.
- Request information: the content of your message and any other information you share in connection with your request.
Our customers, business partners and suppliers, and their representatives and employees
- Identity: first and last name, job title.
- Contact: phone number, e-mail address, business address.
- Customer transaction data: quotation and contract details; project, installation and support requests and the related correspondence.
- Financial data: invoice and payment information, bank account details.
- Legal transaction data: correspondence and documents relating to possible disputes and to proceedings with competent authorities.
Job applicants
- Identity and contact: first and last name, phone number, e-mail address.
- CV information: education, work experience and any other information you share in your application.
Data processed on behalf of our customers: With regard to personal data contained in the ERP software and mobile applications we develop, install or maintain for our customers, the Company generally acts as a data processor on behalf of, and under the instructions of, the customer. Access to such data during installation, maintenance and support services also falls within this scope and is subject to our contract with the customer. The data controller for such data is the respective customer; notices and requests concerning this data should be addressed to the customer.
3. For what purposes do we process personal data?
- Responding to your requests and questions, assessing your needs and preparing quotations,
- Concluding and performing contracts; carrying out software development, installation, maintenance and support services,
- Carrying out invoicing, collection and accounting,
- Managing our relationships with business partners and suppliers,
- Evaluating job applications,
- Fulfilling our legal obligations and responding to requests from competent authorities,
- Ensuring the security of our website and information systems,
- Establishing, exercising and defending our rights in legal disputes.
4. Legal grounds for processing
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
- It is directly related to the conclusion or performance of a contract (Art. 5/2-c),
- It is necessary for the data controller to fulfil its legal obligations (Art. 5/2-ç),
- It is necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
- It is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f).
Processing that does not rely on these grounds, such as sending commercial electronic messages for promotional purposes, requires your separate explicit consent.
5. To whom may personal data be transferred?
Within the limits of the purposes above and in accordance with Article 8 of the KVKK, your personal data may be transferred to:
- financial advisers, auditors and lawyers from whom we receive financial and legal services,
- service providers from whom we receive hosting, e-mail and other information technology services,
- banks, for payment and collection processes,
- competent public authorities such as courts, enforcement offices and tax offices, upon request.
Your personal data is not transferred abroad unless the conditions set out in Article 9 of the KVKK are met.
If you choose to load the map on our contact page, your browser connects directly to Google’s servers; Google’s privacy policy applies to the data Google processes in that connection. The map is not loaded unless you choose to load it.
6. How is personal data collected?
Your personal data is collected through our website’s server logs, phone calls and e-mail correspondence, quotations and contracts, meetings, support requests, and the documents and CVs you send us, by fully or partially automated means or by non-automated means as part of a data recording system.
7. Retention period
Your personal data is retained for as long as required by the purpose of processing, for the retention periods set out in the applicable legislation (e.g. the record-keeping periods under tax and commercial law) and for the applicable statutes of limitation. At the end of these periods it is erased, destroyed or anonymised.
8. Your rights under Article 11 of the KVKK
By applying to the Company, you have the right to:
- learn whether your personal data is being processed,
- request information if your personal data has been processed,
- learn the purpose of the processing and whether the data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data is transferred,
- request the correction of incomplete or inaccurate personal data,
- request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
- request that the operations carried out under items 5 and 6 be notified to the third parties to whom your personal data has been transferred,
- object to a result to your detriment arising from the analysis of your data exclusively through automated systems,
- claim compensation for damages arising from the unlawful processing of your personal data.
9. Applications
You can submit requests regarding your rights using the methods described on the Data Subject Application Form page. Your application will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.