Privacy Notice (KVKK)

1. Data Controller

Within the scope of this Privacy Notice, the data controller is Sofa Yazılım. You can reach us through the following channels:

• Email: info@sofayazilim.com
• Website: sofayazilim.com

2. Personal Data Processed

When you fill out the contact form on sofayazilim.com, request a demo, or contact us by email, we process the following personal data:

• Identity information: First name, last name
• Contact information: Email address, phone number (optional)
• Professional information: Company name
• The content of the message you send us
• Technical data collected automatically during your visit: IP address, browser information, visit timestamp (via Cloudflare)

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Responding to your contact request and communicating with you
• Fulfilling your demo request and offering our products/services
• Establishing and maintaining a commercial relationship
• Fulfilling our legal obligations
• Ensuring website security and preventing abuse

4. Legal Basis for Processing

Your personal data is processed based on your explicit consent under Article 5/1 of the KVKK and/or under Article 5/2 grounds, including "directly related to the establishment or performance of a contract", "necessary for the data controller's compliance with a legal obligation", and "necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not violated".

Data is collected via the website's contact form, email, and electronic communication channels through automated or partially automated means.

5. Transfer of Personal Data

Your personal data is transferred, to the extent required by our service delivery and in accordance with Articles 8 and 9 of the KVKK, to the following third-party service providers:

• Cloudflare, Inc. (website hosting, content delivery network, and security) — servers located globally
• Resend, Inc. (email delivery service) — based in the United States
• Zoho Corporation (business email service) — servers located in the European Union

6. Retention Period

Your personal data is retained for the period required by the processing purpose and within the legal retention periods stipulated by applicable regulations.

Data submitted through the contact form is retained for a maximum of 2 years if no commercial relationship is established, or for 10 years following the end of the relationship if one is established.

7. Rights of the Data Subject

Under Article 11 of the KVKK, you have the following rights as a data subject:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used for that purpose
• To know the third parties to whom data is transferred domestically or abroad
• To request correction if data has been processed incompletely or incorrectly
• To request deletion or destruction under the conditions set forth in Article 7 of the KVKK
• To request that correction/deletion/destruction operations be notified to third parties to whom data was transferred
• To object to a result against you arising from the analysis of your data exclusively through automated systems
• To request compensation for damages incurred due to unlawful processing

8. How to Apply

You can submit applications regarding the rights stated above by sending an email to info@sofayazilim.com together with documents verifying your identity and a statement of your request.

Your application will be concluded within 30 days at the latest, in accordance with Article 13 of the KVKK.