Pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK” or the “Law”), as PTT Information Technologies Joint Stock Company (“PTT TEKNOLOJİ”) in the capacity of ‘data controller’, we collect, process, and transfer your personal data under the conditions detailed below.
In accordance with Article 10 of the Law, through this clarification text, PTT TEKNOLOJİ informs you, the data subjects defined as ‘related persons’ under the Law, about the collection, processing, and transfer of your personal data, as well as your rights under the Law. You can access detailed information and explanations regarding the issues regulated herein from the “PTT Information Technologies Joint Stock Company Personal Data Protection and Processing Policy” published at
https://www.pttteknoloji.com.tr.
- Data Controller
PTT TEKNOLOJİ, in the processes of processing your personal data, acts as the ‘data controller’ as defined in Article 3/1-(I) of the Law, determining the purposes and means of processing your personal data.
As the data controller, PTT TEKNOLOJİ is responsible for establishing and managing the data recording system and taking administrative and technical measures regarding data security. Within this scope, your data may also be processed by third parties in the capacity of ‘data processor’ as defined in Article 3/1-(I) of the Law.
- Methods and Purposes of Collecting Your Personal Data
Your personal data, by PTT TEKNOLOJİ, within the scope of the legal grounds and processing purposes explained below, may vary depending on the service and processing purpose, and is collected verbally, in writing, or electronically through automatic or non-automatic means via company units, employees and authorized representatives, websites, mobile applications, projects, call centers, public institutions, and other similar channels.
- Processing, Legal Grounds, and Purposes of Your Personal Data
Your personal data collected by PTT TEKNOLOJİ, in accordance with the Law No. 5549 on the Prevention of Laundering Proceeds of Crime, the Electronic Communications Law No. 5809, the Labor Law No. 4857, and the Turkish Commercial Code No. 6102, as well as all other relevant national/international legislation and secondary regulations published by national/international authorities (BTK, BDDK, CBRT, MASAK, TBB, etc.), and obligations arising from all agreements to which we are a party;
- End-to-end data center setup and operation services,
- Project management system adaptation services,
- KVKK legal and technical consultancy services,
- Digital transformation services,
- E-Apostille software,
- E-Notification software,
- PttJETON software,
- TRota mobile application,
- Research and development activities
are processed within the scope of establishing contracts related to any products and services you request from PTT TEKNOLOJİ, preparing all records and documents (in paper or electronic form), providing the mentioned products and services, and ensuring their proper and uninterrupted continuation; carrying out necessary operational activities of PTT TEKNOLOJİ, its subsidiaries, parent company, and business partners; ensuring legal and commercial security; ensuring the security of all our locations; managing human resources policies of PTT TEKNOLOJİ, and in compliance with the principles set forth in Article 4 of the Law and under the conditions provided in Articles 5 and 6.
- Parties to Whom Your Personal Data Is Transferred and Purposes of Transfer
Your personal data collected by PTT TEKNOLOJİ may, for the purposes explained in this text, be transferred to persons or institutions authorized to request and process personal data within the scope of the legislation referred to above or agreements to which we are a party (including but not limited to BRSA, CMB, CBRT, MASAK, The Banks Association of Turkey Risk Center, judicial and administrative authorities, other official institutions and organizations), as well as financial institutions under Article 73/4 of the Banking Law No. 5411, PTT TEKNOLOJİ’s domestic or foreign subsidiaries, its parent company and its parent company’s subsidiaries, business partners, suppliers, authorized persons, shareholders, under the conditions and purposes of personal data processing specified in Articles 8 and 9 of the Law.
- Method of Collecting Personal Data
Your personal data, for the purposes mentioned above, and in accordance with the fundamental principles stipulated in the Law; based on the reasons such as being required by law, performance of a contract, fulfillment of the data controller’s legal obligation, being made public by you, and the legitimate interests of our Company provided that it does not harm your fundamental rights and freedoms; are collected automatically or non-automatically by the following methods:
- When you visit our workplaces, verbally, in writing, or electronically via closed-circuit camera recording systems,
- Through applications you make via e-mail,
- Through applications and software used by our Company,
- When you visit or become a member of our websites, via cookies, and through social media channels.
- Retention Period of Your Personal Data
Your personal data collected by PTT TEKNOLOJİ, within the purposes explained in this text, excluding obligations arising from legal regulations, are processed for the maximum period required for the purpose for which they are processed and in any case for the legal statute of limitations. After the expiration of this period, your personal data will be deleted, destroyed, or anonymized in accordance with Article 7 of the Law.
- Your Legal Rights
As the personal data owner, in accordance with Article 11 of the Law, by applying to PTT TEKNOLOJİ as the data controller, you have the right to:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request correction if your personal data is incomplete or incorrectly processed, and request that the action taken in this context be notified to third parties to whom your personal data has been transferred,
- Request deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law (even if it has been processed in accordance with the Law and other relevant laws, when the reasons requiring processing are eliminated) and request that the action taken in this context be notified to third parties to whom your personal data has been transferred,
- Object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,
If you suffer damage due to the unlawful processing of your personal data, you have the right to demand compensation for the damage. The exceptional cases stipulated in Article 28 of the Law are reserved.
You can submit your requests regarding these rights by filling out the “Application Form” available at
https://www.pttteknoloji.com.tr and using the methods specified in this form. Your request will be concluded as soon as possible, and in any case within thirty (30) days, in principle free of charge, but if the process requires an additional cost, it will be finalized for the fee determined in the tariff set by the Personal Data Protection Board.
