GDPR Compliance

Data Controller

FATGPT YAZILIM VE DANISMANLIK LTD. STI. ("Company", "we", "us", or "our") is the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law (KVKK).

Categories of Personal Data Processed

• Identity Information: Name, surname, date of birth, nationality
• Contact Information: Email address, phone number, address
• Professional Information: Company name, position, business area
• Transaction Information: Project details, service requests, communication records
• Marketing Information: Communication preferences, interests
• Technical Information: IP address, browser type, device information, cookies

Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Providing software development and consulting services
• Communication and customer relationship management
• Contract execution and performance
• Marketing and promotional activities (with your consent)
• Improving service quality and customer satisfaction
• Compliance with legal obligations
• Security of business operations and IT systems
• Invoicing and financial reporting

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Your explicit consent
• Necessity for contract performance
• Compliance with legal obligations
• Legitimate interests of the data controller

Data Recipients

Your personal data may be shared with:

• Cloud service providers (for data storage and processing)
• Payment service providers
• Legal and financial advisors
• Competent public authorities and legal entities (when legally required)
• Business partners and suppliers (for project execution)

International Data Transfers

Some of our service providers may be located outside Turkey and the EU. In such cases, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.

Data Retention Period

Your personal data will be retained for the period necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Generally:

• Contract-related data: 10 years (as per Turkish Commercial Code)
• Accounting records: 10 years (as per Tax Procedure Law)
• Marketing consent data: Until consent is withdrawn
• Website usage data: Up to 2 years

Your Rights as Data Subject

Under GDPR and KVKK, you have the following rights:

• Right to learn whether your personal data is being processed
• Right to request information about processing activities
• Right to know the purpose of processing and whether data is used accordingly
• Right to know third parties to whom data is transferred
• Right to rectification of incomplete or inaccurate data
• Right to erasure or destruction of data
• Right to request notification to third parties of rectification, erasure or destruction
• Right to object to automated processing
• Right to claim compensation for damages arising from unlawful processing

How to Exercise Your Rights

To exercise your rights, you can submit an application:

• By Email: [email protected]
• By Mail: FATGPT YAZILIM VE DANISMANLIK LTD. STI., Antalya, Turkey

We will respond to your request within 30 days, free of charge. In case of excessive cost, we may charge a reasonable fee based on administrative costs.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Data backup and disaster recovery procedures

Contact Information

For any questions or concerns about data protection, please contact us:

Data Controller: FATGPT YAZILIM VE DANISMANLIK LTD. STI.
Email: [email protected]
Address: Antalya, Turkey
Website: fatgptyazilim.com.tr