1. Identity of the Data Controller
In accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by Softmech Mühendislik as the data controller.
2. Purposes of Processing Your Personal Data
Your personal data is processed for the following purposes:
- Receiving and responding to your communication requests, questions and complaints,
- Evaluating your project, quotation and collaboration requests,
- Receiving and evaluating your career applications and contacting you about suitable positions,
- Carrying out, developing and reporting on company activities,
- Fulfilling legal obligations and responding to requests from official authorities,
- Carrying out information security processes and ensuring system security.
3. Categories of Personal Data Processed
The personal data processed varies depending on our activities and the channel used, but generally includes the following categories:
- Identity information (name and surname, etc.),
- Contact information (email, phone, company name, etc.),
- Professional experience and education information (CV content, position applied for, etc.),
- Transaction security information (log records, IP address, etc.),
- Message and content information (contact form, project requests, feedback, etc.),
- Uploaded files and attachments (contact form attachments, CV files, etc.).
4. Method of Collection and Legal Grounds for Processing
Your personal data is collected through the forms on our website, email correspondence, online application forms and similar electronic channels, by automatic or partially automatic means.
In this context, your personal data is processed based on one or more of the following legal grounds set out in Articles 5 and 6 of the KVKK:
- It is expressly provided for by law,
- It is directly related to the establishment or performance of a contract,
- It is necessary for the data controller to fulfill its legal obligation,
- Processing is necessary for the establishment, exercise or protection of a right,
- Processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms,
- The data subject has given explicit consent (particularly where you have expressly given consent in contact and career forms).
5. Parties to Whom Personal Data Is Transferred and Purposes
Your personal data may be shared, in accordance with Articles 8 and 9 of the KVKK, with information technology infrastructure providers (for example, companies providing cloud storage and database services), consultancy organizations, and, where necessary, authorized public institutions and organizations, for the purpose of carrying out our activities and ensuring continuity.
CV files you upload as part of your career applications are stored securely in cloud storage and can only be viewed by authorized human resources staff and the relevant department managers.
6. Retention Period of Personal Data
Your personal data is retained for the periods stipulated in the relevant legislation or required for the purpose of processing; at the end of these periods it is deleted, destroyed or anonymized using methods compliant with the legislation. In determining the periods, commercial and legal limitation periods, possible dispute processes and the balance of legitimate interests are taken into account.
7. Your Rights Under the KVKK
Pursuant to Article 11 of the KVKK, as a data subject whose personal data is processed, you have the following rights:
- To learn whether your personal data is being processed,
- To request information if your personal data has been processed,
- To learn the purpose of processing and whether it is used in accordance with that purpose,
- To know the third parties to whom your personal data is transferred in Türkiye or abroad,
- To request correction of your personal data if it has been processed incompletely or inaccurately,
- To request deletion or destruction of your personal data where the reasons requiring its processing under the KVKK and related legislation no longer exist,
- To request that the correction, deletion or destruction operations mentioned above be notified to third parties to whom your personal data has been transferred,
- To object to a result against you arising from the analysis of the processed data exclusively by automated systems,
- To request compensation for damages if you suffer harm due to the unlawful processing of your personal data.
8. Application Method
You can submit your requests under Article 11 of the KVKK and related articles to Softmech Mühendislik in writing, or by using a registered electronic mail (KEP) address, a secure electronic signature, a mobile signature, or the email address you previously notified to us and which is registered in our system. Your applications will be concluded as soon as possible depending on their nature, and within 30 (thirty) days at the latest.