INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

Our company, in accordance with Article 10 of the Personal Data Protection Law (KVKK), informs data subjects during the acquisition of personal data. In this context, the company, as the data controller, provides information regarding the purpose of processing personal data, the recipients and purposes of data transfer, the method and legal basis for data collection, and the rights of the data subject. Terms not defined in this Information Notice shall be interpreted in accordance with the definitions in the “Policy on Processing and Protection of Personal Data” (“KVK Policy”), available at […].

Data Controller	Ecommint Software Technologies Inc.
Address	Yeşilce Mah.Dalgıç Sokak No:3/5 İç Kapı No:1 Kağıthane / İSTANBUL
Mersis No	032410595320001
Trade Registry No	407599 – 5
Tel	+90 212 963 31 63
Website	https://e-commint.com/

Your personal data will be processed, recorded, stored, updated, transferred, and/or classified within the framework explained below for business purposes. Our company takes all necessary technical and administrative measures to ensure the prevention of unlawful processing and access and to safeguard the data.

1. How Do We Collect Your Personal Data?

We collect your personal data through written, verbal, electronic means, or via other channels, in accordance with the provisions of the Law, the relevant regulations, and our Personal Data Protection, Retention, and Disposal Policy. Personal data is collected through:

• Forms on our website or other company platforms.
• Contracts, surveys, interviews, digital platforms, and social media channels.
• Email, sales, marketing, and support units.
• Events or other interactions.

2. Processing of Personal Data

2.1. Processing within Legal Framework : Your personal data provided, disclosed, or recorded may be processed automatically or partially automatically as necessary for establishing or performing a contract or fulfilling legal obligations as per Article 5 of the Law. For example, we process personal data when it is required for fulfilling a request, order, or contract.

2.2 Processing with Consent : Where explicit consent is obtained under legal provisions, personal data may be processed in accordance with the articles of the Law for purposes such as promotional activities, advertising, marketing, or introducing new products, services, or features.

3. Purposes of Processing Personal Data

Your personal data may be processed for purposes such as:

• Ensuring website functionality and security.
• Recording access details like passwords, IP addresses, and browser settings.
• Personalizing website experience and saving preferences.
• Conducting website usage analysis and collecting statistics for improvement.
• Responding to communication form submissions.
• Handling customer requests, memberships, and welcome emails
• Conducting marketing, campaign, and promotional activities.
• Improving, updating, and customizing products and services.
• Ensuring customer satisfaction and loyalty.
• Managing post-sales services, including refunds and technical support.
• Complying with legal obligations and responding to regulatory or judicial demands.

In customer or potential customer relationships, we process communication details (e.g., name, business contact details) to manage contracts, orders, product/service deliveries, support, billing, payments, and other related activities.

For physical security, we record visitors’ names, identities, and related contact information. For safety and regulatory purposes, we use surveillance technology within our premises.

For human resources, personal data is processed for:

• Recruitment processes, including candidate selection.
• Managing employee rights and benefits.
• Employee training and career development.
• Issuing company ID cards, email accounts, or corporate devices.
• Compliance with occupational health and safety regulations.

To Whom and For What Purposes Do We Transfer Your Personal Data?

Your personal data may be transferred, in compliance with data transfer regulations, to domestic or international third parties under the following conditions:

• Consultants/Service Providers: Accounting firms, agencies, pension providers, life insurance companies, legal advisors, health insurance firms, payroll services, etc.
• Suppliers: Data may be shared with suppliers for business, legal, or contractual requirements.
• Employees: Data may be shared with employees for internal communication or operational purposes.
• Event Sponsors: Data may be shared for fulfilling sponsorship obligations.
• Authorized Persons or Legal Entities: Data may be shared with legally authorized individuals or organizations upon lawful requests.
• Business Partners: Data may be shared with business partners to fulfill partnership agreements.
• Shareholders: Data may be shared with shareholders for reporting and compliance purposes.
• Judicial Authorities and Public Institutions: Data may be shared with authorized public institutions upon lawful requests.

Transfer Abroad
Your personal data may be transferred abroad if adequate protection is ensured in the foreign country or upon your explicit consent, or under other conditions permitted by the Law.

• Rights Under KVKK
• Data subjects have the following rights under Article 11 of the Law:
• To learn whether personal data is processed.
• To request information regarding the processing.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To learn about third parties to whom the data has been transferred domestically or internationally.
• To request correction of incomplete or inaccurate data.
• To request the deletion or destruction of personal data under certain conditions.
• To object to decisions based on automated data processing.
• To request compensation for damages caused by unlawful data processing.

Retention, Deletion, and Anonymization of Personal Data

Personal data is stored for as long as required by applicable regulations or until the purpose of processing is achieved. When the purpose ceases to exist, data is deleted, destroyed, or anonymized.

Deletion involves ensuring that data cannot be retrieved or used. Destruction involves physically or digitally eliminating the data. Anonymization ensures the data cannot be linked to an individual, even when combined with other datasets.

For inquiries or to exercise your rights, please contact info@e-commint.com with the necessary information to verify your identity.

E-Commint Software Technologies Inc. reserves the right to update this policy, which will be made available on our website.