Privacy Notice
How we handle your personal data under Turkish Personal Data Protection Law No. 6698 (KVKK).
Last updated: 8 September 2026
Data controller
This notice is prepared by YM Information Technologies (“YMBT”) as data controller, under Article 10 of Turkish Personal Data Protection Law No. 6698 (the “Law”) and its accompanying communiqué on disclosure obligations.
You can find our contact details on the Contact page of this site.
What we collect and how
We collect personal data only when you contact us, and only directly from you:
- Contact form: name, email address, phone number (optional) and message content.
- If you email or call us: the contact details and correspondence you share.
We collect nothing automatically
This site uses no visitor tracking, analytics or advertising tools. No personal data is collected automatically through the site. See our Cookie Policy for details.
Purposes
- Responding to your questions and requests
- Providing information about our services and preparing proposals
- Conducting pre-contractual discussions
- Meeting our legal obligations
Legal basis
We process your data on the grounds set out in Article 5(2) of the Law: that processing is directly related to the establishment or performance of a contract (sub-paragraph c), and that processing is necessary for our legitimate interests provided it does not harm your fundamental rights and freedoms (sub-paragraph f).
Transfers
Your data is processed only through the email infrastructure we use to reply to you. It is not shared with third parties except where legally required.
If that email infrastructure is located abroad, the transfer is based on the appropriate safeguards required by Article 9 of the Law, and this notice is updated to name the provider.
Retention
Your data is kept until your request is resolved and for the statutory limitation periods that follow, after which it is deleted, destroyed or anonymised.
Your rights under Article 11
By applying to us as data controller, you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether the data is used accordingly
- Know the third parties to whom it is transferred, in Turkey or abroad
- Request correction if it is incomplete or inaccurate
- Request deletion or destruction under the conditions in Article 7
- Request that corrections and deletions be notified to third parties the data was transferred to
- Object to a result against you produced solely by automated analysis
- Claim compensation if you suffer damage due to unlawful processing
How to apply
Send your request in writing to the email address on our Contact page. We respond as soon as possible and within thirty days at the latest, depending on the nature of the request.
