Personal data notice (KVKK)

Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the business below as data controller:

[Company name: Project Settings › Legal]
[Address: Project Settings › Legal]
E-mail: [E-mail: Project Settings › Legal]

This notice covers people who visit Kodmob Software, write to us through the site's forms.

Personal data processed and purposes

Process	Data categories	Purpose
Site visit	Transaction security: IP address, browser details, request logs	Running the site, preventing attacks and abuse, information security
Contact and enquiry forms	Identity: name · Contact: e-mail, phone · Customer transaction: message, subject · Transaction security: IP hash, browser details	Assessing and answering your request, preventing spam

We do not sell personal data to third parties for marketing and we do not use automated decision-making or profiling. Please do not share special categories of personal data (health, beliefs, etc.) in forms unless necessary.

Legal grounds

Your personal data is processed on the following grounds of Article 5 KVKK:

Conclusion or performance of a contract (Art. 5/2-c): to assess your request,
Legal obligation (Art. 5/2-ç): record-keeping and reporting duties under tax, commercial and consumer law,
Establishing, exercising or protecting a right (Art. 5/2-e): in possible disputes,
Legitimate interest (Art. 5/2-f): security logs, spam protection and rate limiting (provided your fundamental rights are not harmed).

Method of collection

Your personal data is collected electronically through the forms on our site, partly by automated means (form submission, security logs). When you write to us directly by e-mail or messaging apps, the information you share reaches us through those channels.

Transfer of personal data

In line with Articles 8 and 9 KVKK, your personal data may be transferred only to the extent required to:

the providers of our hosting server and e-mail infrastructure,
competent public authorities and courts upon request.

Transfers abroad are made in accordance with the procedures and safeguards of Article 9 KVKK.

Retention periods

Security records: 90 days.
Contact and enquiry forms: 24 months, then automatically and permanently deleted.

If you ask us to delete your data before the period ends, we do so without delay unless a legal retention duty applies.

Your rights under KVKK

Under Article 11 KVKK you may apply to the data controller to:

learn whether your personal data is processed,
request information if it has been processed,
learn the purpose of processing and whether it is used accordingly,
know the third parties in Turkey or abroad to whom it is transferred,
request correction if it is incomplete or inaccurate,
request deletion or destruction under the conditions of Article 7 KVKK,
request that corrections and deletions be notified to the third parties to whom the data was transferred,
object to a result against you arising exclusively from automated analysis,
claim compensation for damage caused by unlawful processing.

How to apply

Send your application with information that allows us to identify you (name, the e-mail address you shared with us or your order number) and the subject of your request:

by e-mail to [E-mail: Project Settings › Legal] from the e-mail address you shared with us,
by a signed letter to the address above.

Under the Communiqué on the Procedures and Principles of Applications to the Data Controller, your application is concluded free of charge within 30 days at the latest; if the process involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, you find the answer insufficient or no answer is given in time, you may complain to the Personal Data Protection Board. Visitors from the EU may also complain to their local supervisory authority under the GDPR.