KVKK Clarification Text
Purpose of the Clarification Text and Our Company's Position as Data Controller
Our company Nar Bulut Bilgi Teknolojileri San. ve Tic. A.Ş. (“Narbulut” and/or “Company”) has the title of “data controller” within the scope of the Law on the Protection of Personal Data No. 6698 (“Law”) in terms of personal data regarding customers, and this Clarification Text aims to inform the relevant customers regarding the personal data processing activities carried out by Narbulut and related issues in accordance with the said Law.
In the following cases where the personal data processing conditions in Articles 5(2) and 6(3) of the Law specify the terms, express consent of the customers must be obtained in order for Narbulut to process personal data. Regarding processes that do not require explicit consent Clarification Text data processing activities are carried out within the scope of the in the Clarification Text is processed in accordance with the stated legal principles.
Purpose of Processing Customers' Personal Data
Customers’ personal data is processed by Narbulut for the purposes of conducting necessary work by business units to enable relevant persons to benefit from the products and services offered, and to carry out related business processes. Narbulut performs customer relations management processes, including but not limited to determining target audiences, carrying out activities that increase customer experience for products, conducting promotional and marketing activities, executing direct and indirect marketing, running personalized marketing and remarketing activities, carrying out personalized segmentation, reporting, analysis and research regarding activities, market research, planning and execution of customer satisfaction activities. It can be processed in line with the approval of the Customer and can be processed for these purposes within the scope of planning and execution of the relevant marketing processes of Narbulut’s products and/or services in general, including the purpose of recommending and promoting the products and services offered by Narbulut to the relevant people by considering their viewing, visiting their habits and needs, and planning and execution of customer relationship management processes, and planning and execution of the processes of creating and/or increasing loyalty to the products and/or services offered by Narbulut. As the Clarification Text may be shared with specified parties.
Personal Data to Be Processed with Customers' Explicit Consent and Processing Purposes
Personal data to be processed with explicit consent and the processing purposes are specified in the Consent Text.
Transfer of Customers' Personal Data
Customers’ personal data may be transferred by Narbulut to the following parties for the purposes of conducting necessary work by business units to enable relevant persons to benefit from the products and services offered, and to carry out related business processes: business partners, suppliers, legally authorized public institutions and organizations, and legally authorized private persons, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, within the framework of the principles and conditions set forth in this Clarification Text. As stated in the Clarification Text, the Customer’s personal data may be shared within the scope of the purposes specified therein.
Method and Legal Basis of Collecting Personal Data
Personal data is collected from customers electronically. The personal data collected for the above-mentioned legal reasons is processed and transferred in accordance with the conditions specified in Articles 5 and 6 of the Law, within the scope of this Clarification Text and as required by explicit consent, in accordance with the purposes detailed above in this Clarification Text.
Rights of Customers as Data Subjects
Pursuant to Article 11 of the Law, data subjects have the following rights;
To learn whether personal data is being processed about them,
If personal data has been processed, to request information about it,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data if it is incomplete or inaccurately processed,
To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
To request that the transactions carried out pursuant to the above two items be notified to third parties to whom personal data has been transferred,
To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
To demand compensation for damages in case of loss due to unlawful processing of personal data.
In accordance with Article 13(1) of the Law, the application regarding the exercise of the above-mentioned rights must be submitted to us in writing or by other methods determined by the Personal Data Protection Board. In this context, the application can be delivered to us in person, sent to our e-mail address, or submitted through other methods determined by the Board.
Pursuant to Article 13(2) of the Law, requests included in the application will be concluded free of charge as soon as possible and within thirty days at the latest depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged. Personal Data Protection Law Application Form can be accessed via the relevant link.
