Regarding the Processing of Personal Data
Corporate Customer Officer / Employee Disclosure Text

Data Controller:

GovernID Yazılım ve Bilişim Teknolojileri A.Ş.
Burhaniye, Merdiven, Burhaniye Abdullahağa Caddesi, Çıkmazı Sokak No:2, 34676 Üsküdar/İstanbul

As GovernID Yazılım ve Bilişim Teknolojileri A.Ş. (“Company”), we have prepared this clarification text (“Clarification Text”) to inform you, our customers/potential customers, about the processing, storage, and transfer of your personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.

1. Processed Personal Data and Purposes of Processing

Corporate Customer Officer / Employee

Processed Personal Data:

• Name, Surname
• TR Identity Number / Foreign Identity Number / Passport Number / Tax Identity Number
• Signature, Other Information in Identity Photocopy
• Information in Signature Circular / Declaration
• Trade Registry (Mersis) Number
• Information in Power of Attorney

Purposes of Processing:

• Execution of Information Security Processes
• Execution of Access Authorizations
• Execution of Activities in Compliance with Legislation
• Execution of Finance and Accounting Affairs
• Follow-up and Execution of Legal Affairs
• Execution of Communication Activities
• Execution / Supervision of Business Activities
• Execution of Business Continuity Ensuring Activities
• Execution of Goods/Service Procurement Processes
• Execution of Risk Management Processes
• Execution of Contract Processes
• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data:

• Necessary for the establishment or performance of a contract
• Mandatory for the data controller to fulfill its legal obligation
• Mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collecting Personal Data:

• Collected through electronic media, e-mails, contracts, documents declared by you, invoices, phone calls, and third parties.

2. Contact Information

Processed Personal Data:

• E-Mail Address
• Mobile Phone Number, Home Phone Number, Work Phone Number
• Address Information
• Country of Residence Information
• Workplace Name/Title
• Certificate of Residence

Purposes of Processing:

• Execution of Activities in Compliance with Legislation
• Execution of Finance and Accounting Affairs
• Execution of Communication Activities
• Execution / Audit of Business Activities
• Execution of Business Continuity Activities
• Execution of Goods / Service Sales Processes
• Execution of Contract Processes

Legal Reasons for Processing Personal Data:

• Directly related to the conclusion or performance of a contract
• Mandatory for the legitimate interests of the data controller

Methods of Collecting Personal Data:

• Collected through electronic media, e-mails, contracts, documents declared by you, invoices, phone calls, and third parties.

3. Legal Process Information

Processed Personal Data:

• Information in Correspondence with Judicial and Administrative Authorities
• Information within the Scope of Dunning Notices / Notices
• Information in Lawsuits and Execution Files
• KVK Request Information

Purposes of Processing:

• Execution of Activities in Compliance with Legislation
• Follow-up and Execution of Legal Affairs
• Execution of Contract Processes
• Follow-up of Requests / Complaints
• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data:

• Directly related to the conclusion or performance of a contract
• Mandatory for the legitimate interests of the data controller

Methods of Collecting Personal Data:

• Collected through documents declared by you, printed documents, and third parties.

4. Personal Data (Position/Title Information)

Processed Personal Data:

• Position/Title Information
• Company Information

Purposes of Processing:

• Execution / Supervision of Business Activities
• Execution of Business Continuity Activities
• Execution of Goods / Service Sales Processes
• Execution of Contract Processes

Legal Reasons for Processing Personal Data:

• Directly related to the conclusion or performance of a contract
• Mandatory for the legitimate interests of the data controller

Methods of Collecting Personal Data:

• Collected through documents declared by you, printed documents, and third parties.

5. Finance Information

Processed Personal Data:

• Bank Account Information
• IBAN Number
• Invoice Information
• Collateral Information
• Financial Information on Tax Certificate
• Partnership/Capital Information

Purposes of Processing:

• Execution of Financial and Accounting Affairs
• Execution of Contract Processes
• Execution / Audit of Business Activities
• Execution of Business Continuity Activities

Legal Reasons for Processing Personal Data:

• Directly related to the establishment or performance of a contract
• Mandatory for the data controller to fulfill its legal obligation
• Mandatory for the establishment, exercise, or protection of a right

Methods of Collecting Personal Data:

• Collected through e-mails and documents declared by you.

6. Transfer of Personal Data

Domestic Transfer:
Your personal data may be shared with:

• Persons expressly authorized in the legislation, such as the Social Security Institution
• Authorized persons or public institutions and organizations based on a court decision or administrative request
• Our suppliers to conduct audit/ethical activities, financial and accounting affairs, legal affairs, business activities, procurement processes, and contract management
• Real or Private Legal Persons to conduct communication, financial, business, sales, organization, and event management processes.

7. Transfer of Personal Data Abroad

In case of your explicit consent, your data may be transferred to Hubspot Inc., our cloud services supplier whose servers are located abroad, for purposes such as conducting information security processes, communication activities, business activities, sales processes, customer satisfaction, marketing activities, storage, and archive activities.

8. Retention Period for Personal Data

Your personal data will be stored for the period specified by law or the relevant legislation. If no period is stipulated, the data will be stored for a reasonable period connected to the processing purposes.

9. Your Rights as a Data Subject

• To learn whether your personal data is processed
• Request information about the processing
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom your data is transferred, in Turkey or abroad
• Request correction or deletion of your personal data
• Request notification of corrections or deletions to third parties
• Object to any detrimental outcome via automated systems
• Request compensation for damages due to unlawful processing

10. How to Exercise Your Rights

You can submit requests regarding your personal data by:

• Applying in person with valid identification to our address
• Sending a signed petition to our postal address
• Sending an email to [email protected] using your registered email
• Using mobile signature or secure electronic signature and emailing [email protected]
• Sending to [email protected] via registered electronic mail (REM)

11. Response Time for Requests

Your requests will be answered within 30 days from receipt. If your request involves additional costs, a fee determined by the Personal Data Protection Board may apply.