Privacy Notice on the Processing of Personal Data

This notice aims to ensure compliance with obligations regarding the processing of personal data by CED Technology Consulting, Information Technology, and Support Services Joint Stock Company (the Company) under the Personal Data Protection Law No. 6698 (KVKK) and to inform data subjects.

Data Controller

In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data may be processed by CED Technology Consulting, Information Technology, and Support Services Joint Stock Company (the Company) as the data controller within the scope described below.

Purpose of Processing Personal Data

Your personal data is processed in accordance with the legal grounds specified in Articles 5 and 6 of the KVKK for the purposes of conducting internal company operations, implementing human resources policies, managing occupational health and safety processes, conducting communication activities, executing contractual processes, managing customer relations, and ensuring security.

Situations Requiring Explicit Consent

Our company obtains the explicit consent of the data subject for data processing activities that are not legally required and are not covered by Articles 5/2 and 6/3 of the KVKK, and processes data solely based on this explicit consent.

To Whom and For What Purpose Personal Data May Be Disclosed

Your collected personal data may be transferred to our business partners, suppliers, Group companies, shareholders, legally authorized public institutions, and private individuals, in accordance with the conditions and purposes of personal data processing specified in Articles 8 and 9 of the KVKK.
Your personal data will not be used for purposes other than those specified above and will not be shared or transferred to third parties except to fulfill legal obligations or at the request of official institutions or organizations.

Data Transfer Abroad

Our Company may transfer personal data abroad only with the explicit consent of the relevant individual or when the legal conditions specified in Article 9 of the KVKK are met, and only to countries where adequate protection has been determined by the Personal Data Protection Board.

Method and Legal Basis for Collecting Personal Data

Your personal data is collected by the Company in compliance with the law through various channels, such as Affiliates, Group Companies, Subsidiaries, and solution partners with whom we collaborate or have contractual relationships.

In this context, the personal data collected from you may be processed and transferred for the purposes specified in Sections (II) and (III) of this Privacy Notice, in accordance with the conditions and purposes of personal data processing set forth in Articles 5 and 6 of the Personal Data Protection Law (KVKK).

Measures Regarding the Protection of Personal Data

The Company takes all necessary technical and administrative measures to protect personal data.

In this context: access control, data masking, encryption, log tracking, and antivirus applications are utilized, and employees are provided with regular training on the Personal Data Protection Law (KVKK).

Retention Period and Destruction Policy for Personal Data

Personal data is retained for a period appropriate to the purpose of processing; at the end of the relevant legal retention periods, it is deleted, destroyed, or anonymized in accordance with the Company’s “Data Retention and Destruction Policy.” The frequency of disposal procedures is evaluated and implemented by the relevant departments.

Rights of Data Subjects Under Article 11 of the KVKK

As data subjects, if you submit requests regarding your rights to the Company using the methods outlined in this Privacy Notice, we will respond to you as soon as possible and no later than 30 days following the evaluation of your request. However, if the Personal Data Protection Board establishes a fee schedule, CED Technology Consulting, Information Technology, and Support Services Trade Inc. will collect the applicable fee from the relevant party in accordance with the established schedule.

In this context, data subjects have the following rights: