This notice explains how Buska Yazılım Bilgi Teknolojileri Limited Şirketi (“Buska Yazılım”) processes your personal data when you visit buskayazilim.com or contact us through the contact form, email or phone. It has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”, also known as KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
1. Data controller
Under the Law, the data controller for your personal data is Buska Yazılım.
- Company name
- Buska Yazılım Bilgi Teknolojileri Limited Şirketi
- MERSIS No
- 0191141838900001
- Address
- Istanbul Arel University TEKMER, Bahar Cad. No: 61, 34212 Bağcılar, Istanbul, Türkiye
- Phone
- +90 533 667 82 92
2. What data we process, why, and on what legal basis
We describe each processing activity separately. All the legal bases we rely on are listed in Article 5(2) of the Law. We do not ask for your explicit consent for any of these activities.
2.1 Contact form
- Data
- Your name and email address; if you provide them, your company name and phone number; the service you are interested in, your preferred start time and the content of your message; the date and time you sent the form; your statement that you have read and understood this notice, and the version in force at that time; a digest of your IP address created with a secret key. We do not keep your IP address itself in the form records.
- Purposes
- To review your request, get back to you, schedule a call and, if you wish, prepare a proposal; to prevent the form from being used for automated or malicious submissions (spam); to be able to prove, when needed, that we have fulfilled our obligation to inform.
- Legal bases
-
- Replying to you, calls and proposals: if your request concerns the formation of a contract, processing is necessary for it (Art. 5(2)(c)). For requests that do not concern a contract, or if you fill in the form on behalf of a company, our legitimate interest in responding to business enquiries (Art. 5(2)(f)).
- Spam prevention: our legitimate interest in keeping our systems secure (Art. 5(2)(f)).
- Record of your statement that you have read and understood this notice: our obligation to prove that we have fulfilled the obligation to inform (Art. 5(2)(ç)) and the protection of a right (Art. 5(2)(e)).
- Keeping data for the periods below: for requests that do not lead to a business relationship, protecting our rights in a possible dispute (Art. 5(2)(e)); for requests that do, the retention being expressly required by law and our legal obligation (Art. 5(2)(a) and 5(2)(ç)).
- Retention
- If your request does not lead to a business relationship, 2 years from our last correspondence. If it does, our correspondence is kept for 10 years under Article 82 of the Turkish Commercial Code; we will inform you separately about other processing within that relationship. The IP digests kept separately to limit the number of submissions are used only to count submissions in the last 24 hours; expired ones are deleted automatically.
2.2 Email and phone
- Data
- Your name, email address or phone number; if you provide them, your company and job title; the content of our correspondence and calls, files you send us and the dates of contact. We do not record phone calls.
- Purposes
- To answer your questions and requests, schedule calls and prepare proposals.
- Legal bases
- If your request concerns the formation of a contract, processing is necessary for it (Art. 5(2)(c)). For requests that do not concern a contract, or if you write on behalf of a company, our legitimate interest in responding to business enquiries (Art. 5(2)(f)). For retention, the legal bases in 2.1 apply.
- Retention
- The same as for the contact form: correspondence that does not lead to a business relationship is kept for 2 years from the last correspondence; otherwise for 10 years under the Turkish Commercial Code.
2.3 Visiting the website
- Data
- Your IP address, the date and time of your visit, the page you opened, your browser and operating system, and the address of the page that referred you. This information is held in the technical logs of the servers that host the site.
- Purposes
- To keep the site secure and running, and to detect errors and attack attempts.
- Legal basis
- Our legitimate interest in keeping our systems secure (Art. 5(2)(f)).
- Retention
- We do not keep copies of these logs in our own systems. They are held on our hosting provider’s servers for the period set by the provider’s system settings and its obligations under Law No. 5651.
If a business relationship is established, we will inform you separately about the processing within that relationship (contract, invoicing and similar).
Our site uses no cookies or similar technologies and stores no information about you in your browser. See the Cookie Policy for details.
Special categories of personal data. We do not ask for special categories of personal data such as health, religion or ethnic origin; please do not include such information in your messages. If you share it anyway, we will not use it for any purpose and will delete it once we notice it.
3. How we collect your data
We collect your personal data directly from you through the contact form, email and phone, electronically and, during phone calls, verbally. Technical logs of your visit are created automatically by the servers that host our site.
4. Who we share your data with
4.1 Within Türkiye
- Our hosting provider, İsimtescil Bilişim A.Ş.: our website and email service are hosted in this company’s data centre in Türkiye. İsimtescil provides this service as a data processor. This transfer is made for the purposes set out in section 2 and on the same legal bases.
- Authorised public authorities and courts: only when they make a request they are legally entitled to make, to comply with our legal obligation (Art. 5(2)(ç)).
- Our lawyers: only in the event of a dispute and to the extent necessary to establish, exercise or protect our rights (Art. 5(2)(e)).
Transfers within Türkiye are made in accordance with Article 8 of the Law.
4.2 Outside Türkiye
We do not transfer your personal data abroad.
5. Your rights
Under Article 11 of the Law, you can apply to us to:
- learn whether your personal data is processed,
- request information about it if it has been processed,
- learn the purpose of the processing and whether your data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your data has been transferred,
- request correction if your data is incomplete or inaccurate,
- request deletion or destruction of your data under the conditions in Article 7 of the Law,
- request that corrections, deletions or destructions be notified to the third parties to whom your data has been transferred,
- object to a result against you arising from the analysis of your data exclusively by automated systems,
- claim compensation if you suffer damage because your data was processed unlawfully.
6. How to apply to us
You can send your application in one of the following ways:
- with a wet-signed letter, delivered by hand to our address above, by registered mail with return receipt, or through a notary,
- signed with a secure electronic signature or mobile signature, to info@buskayazilim.com,
- from the email address you have previously given us and that is registered in our records, to info@buskayazilim.com.
Your application must include your name and surname, your signature for written applications, your Turkish ID number (or, for foreign nationals, your nationality and passport or ID number), your residential or business address for notifications, your email address for notifications if any, your phone and fax numbers and the subject of your request.
We will conclude your application as soon as possible and within 30 days at the latest, free of charge. If the process involves an additional cost, we may charge the fee set by the Personal Data Protection Board. We send our response in writing or electronically.
If your application is rejected, if you find our response insufficient, or if we do not respond in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning of our response, and in any case within 60 days of your application (Art. 14 of the Law).
7. Changes to this notice
We update this notice when our processing activities or the applicable legislation change. The current version and the date of the last update are shown at the top of this page.