Data Protection Notice (KVKK)
Disclosure notice under Article 10 of Turkish Data Protection Law No. 6698: data processed, purposes, legal grounds and data subject rights.
This Notice has been prepared by BeeUpTech Yazılım ve Teknoloji Hizmetleri (“BeeUpTech”) in its capacity as data controller, in order to inform you about the processing of your personal data pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.
1. Data Controller
| Legal name | BeeUpTech Yazılım ve Teknoloji Hizmetleri |
|---|---|
| Brand | BeeUpTech |
| Registered address | Levent, Buyukdere Avenue No: 185, 34394 Sisli / Istanbul, Türkiye |
| info@beeuptech.com | |
| Website | www.beeuptech.com |
2. Scope
This Notice applies to visitors of our website, prospective clients who contact us through the contact/quotation form or the AI assistant, newsletter subscribers, representatives of clients and suppliers, and candidates applying for a position.
3. Personal Data Processed
| Identity | First name, last name |
|---|---|
| Contact | E-mail, telephone, company name and job title, website address, stated address |
| Customer transaction | Request and message content, project/requirement summary, stated budget and timeline, ticket records |
| Transaction security | IP address, user agent, session key, server and application logs, security verification score |
| Marketing | UTM parameters, referrer, navigation path, cookie identifiers |
| Legal proceedings | Records of requests, complaints and applications and related correspondence |
Special categories of personal data within the meaning of Article 6 of the Law are neither requested nor knowingly processed.
4. Purposes of Processing
- Receiving, assessing and concluding contact and quotation requests
- Conducting pre-contractual processes and contractual obligations
- Providing products and services, technical support and customer satisfaction activities
- Operating information security processes and preventing misuse
- Conducting activities in compliance with legislation, including retention and archiving duties
- Marketing communication, analytics measurement and advertising where explicit consent exists
- Providing information to authorised persons, institutions and organisations and managing legal affairs
5. Method of Collection and Legal Grounds
Your personal data is collected wholly or partly by automated means through the electronic forms on our website, the AI assistant, e-mail, telephone, social media accounts and cookies. Processing is based on the following legal grounds:
| Expressly provided by law (Art. 5/2-a) | Record-keeping duties under tax, commercial and e-commerce legislation |
|---|---|
| Compliance with a legal obligation (Art. 5/2-ç) | Responding to requests from authorities, invoicing |
| Formation or performance of a contract (Art. 5/2-c) | Handling quotation, demo and discovery requests, service delivery |
| Establishment, exercise or protection of a right (Art. 5/2-e) | Evidence and right of defence in disputes |
| Legitimate interest (Art. 5/2-f) | Site security, prevention of misuse, corporate outreach and business development |
| Explicit consent (Art. 5/1) | Analytics and advertising cookies, commercial electronic messages, international transfers relying on consent |
6. Transfer of Personal Data
Your personal data may be transferred, in accordance with Articles 8 and 9 of the Law and limited to the relevant purpose, to our hosting and infrastructure providers, our e-mail service provider, our own AI model server, measurement and advertising providers where you have given consent, our legal and accounting advisers, and to competent public authorities upon request.
International transfers arise only in respect of measurement/advertising infrastructures and security components and are carried out under Article 9 of the Law, based on your explicit consent or on the appropriate safeguards recognised by the Board. For the detailed list of recipient groups, see the Privacy Policy.
7. Retention
Your personal data is retained for as long as the purpose of processing requires and until the end of the limitation periods set out in the applicable legislation. A detailed breakdown of retention periods is provided in the Privacy Policy. Upon expiry, data is deleted, destroyed or anonymised.
8. Data Obtained from Publicly Available Sources
As part of our business development activities, corporate contact data relating to companies and their representatives may be obtained from publicly available sources. Such data is processed solely for corporate outreach on the legitimate interest ground; upon your request your record is deleted without delay and you are informed accordingly.
9. Your Rights as a Data Subject
Under Article 11 of the Law, by applying to BeeUpTech you have the right to:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether the data is used in accordance with that purpose;
- know the third parties in Türkiye or abroad to whom the data is transferred;
- request rectification where the data is incomplete or inaccurate;
- request erasure or destruction under the conditions set out in Article 7 of the Law;
- request that the actions under (5) and (6) be notified to third parties to whom the data was transferred;
- object to a result adverse to you arising from analysis carried out solely by automated means;
- claim compensation for damage suffered due to unlawful processing.
10. How to Apply
You may submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, using the Data Subject Request Form. Your application will be concluded within 30 days at the latest. If your application is rejected, the response is found insufficient or no response is provided in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the response and in any event within 60 days of the date of application.
11. Commercial Electronic Messages
Consent, opt-out and Message Management System (İYS) processes relating to newsletter subscriptions and campaign notifications are governed by the Commercial Electronic Message Notice and Consent.
12. Updates
This Notice is updated where necessary; the current version is published on this page. For questions: info@beeuptech.com