Data Protection Notice (KVKK)
Identity of the Data Controller
Pursuant to the Personal Data Protection Law No. 6698 (the "Law"), ITB Bilgi Teknolojileri A.Ş., operating at Üsküdar/Istanbul, acts as the data controller. This notice has been prepared in accordance with Article 10 of the Law and the Communiqué on Procedures and Principles for Fulfilling the Disclosure Obligation.
Categories of Personal Data Processed
The following categories of personal data relating to you are processed:
| Data Category | Description |
|---|---|
| Identity Information | Name, surname, title |
| Contact Information | Email, phone, company address |
| Customer Transaction Information | Service requests, proposal processes, contract information |
| Transaction Security Information | Log records, IP address, cookie data, access timestamps |
Purposes of Processing Personal Data
Your personal data is processed based on the legal grounds specified in Article 5(2) of the Law for the following purposes:
- Establishment and performance of contractual processes
- Responding to customer communication requests
- Planning and executing information security processes
- Measuring and improving service quality
- Ensuring compliance with legal regulations and conducting audit processes
- Managing business partnership and supplier relations
Transfer of Personal Data
Your personal data may be transferred, in accordance with Articles 8 and 9 of the Law, to our business partners and technical infrastructure providers where necessary for service performance, to legally authorized public institutions and organizations as required by legal obligations, and to independent audit firms within the scope of audit and compliance processes.
Method and Legal Basis of Data Collection
Your personal data is collected through the website contact form, email correspondence, telephone calls, and face-to-face meetings using automatic and non-automatic methods. Data processing is based on the legal grounds of "being directly related to the establishment or performance of a contract", "legitimate interest of the data controller", and "fulfillment of legal obligation" as stated in Article 5(2) of the Law.
Rights of the Data Subject (Article 11 of the Law)
You have the following rights under Article 11 of the Law:
- Learning whether your personal data is processed
- Requesting information if your data has been processed
- Learning the purpose of processing and whether data is used in accordance with its purpose
- Knowing third parties to whom your personal data is transferred domestically or internationally
- Requesting correction if data has been processed incompletely or incorrectly
- Requesting deletion or destruction under the conditions set forth in Article 7 of the Law
- Objecting to any adverse result arising from the analysis of processed data exclusively through automated systems
Application Method
To exercise your rights stated above, you may apply in writing to info@itb.com.tr with information verifying your identity, or via registered electronic mail (KEP). Applications are concluded free of charge within the shortest time and no later than 30 (thirty) days depending on the nature of the request. If the process requires additional cost, the tariff determined by the Personal Data Protection Board shall apply.
Last updated: February 2026