This Disclosure Text has been prepared by Proses Consulting in its capacity as data controller, within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation. Our aim is to inform you about the scope within which your personal data is processed, to whom it may be transferred, and the rights you hold under the KVKK.
1. Identity of the Data Controller
Pursuant to the KVKK, the data controller of your personal data is Proses Consulting.
- Title: Proses Consulting
- Address: Mahmutbey Mh. 2536. Sk. Prime Suites No:5/63, Bağcılar, İstanbul
- Phone: +90 212 532 37 61
- E-mail: info@prosesdanismanlik.com.tr
2. Personal Data Processed
The data categories specified below may be processed according to the nature of the legal relationship the data subject establishes with Proses Consulting:
| Data Category | Scope |
|---|---|
| Identity | First name, surname, national ID number (where contractually required), title |
| Contact | Phone, e-mail, address, organisation worked for |
| Customer Transaction | Quote, contract, invoice, request records |
| Transaction Security | IP address, log records, session information, device/browser data |
| Finance | Bank account information, invoice information |
| Professional Experience | CV, certificate, reference information (for job candidates) |
| Marketing | Newsletter subscription, event registration information, cookie preferences |
3. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes within the framework of the processing conditions set out in Articles 5 and 6 of the KVKK:
- Establishment and performance of service contracts
- Provision of sustainability, consulting, audit, engineering and training services
- Conducting customer relations and satisfaction processes
- Fulfilment of financial and legal obligations
- Conducting information security processes
- Ensuring business continuity and operational efficiency
- Conducting advertising, campaign and promotion processes (subject to explicit consent)
- Conducting communication and request management processes
- Providing information to authorised persons, institutions and organisations
4. Parties to Whom Data is Transferred and Transfer Purposes
Your personal data may be transferred to the following parties in accordance with Articles 8 and 9 of the KVKK, to the extent necessary to achieve the purposes listed above:
- Authorised public institutions and organisations: For the fulfilment of legal obligations
- Business partners and suppliers: Within the scope of contractual or legal necessity for the performance of the service
- Parties from whom we receive legal, financial advisory and audit services: For carrying out legal and financial processes
- Cloud, hosting and software service providers: For the provision and maintenance of the information technology infrastructure
Transfers abroad are carried out only where the conditions specified in Article 9 of the KVKK are met.
5. Method and Legal Basis of Data Collection
Your personal data is collected by automatic or semi-automatic means, in physical or electronic environments, through the forms on our website, e-mail correspondence, telephone calls, contracts, visitor records and other communication channels.
The legal bases for processing:
- KVKK Art. 5/2-a: Being expressly stipulated in laws
- KVKK Art. 5/2-c: Being necessary for the establishment or performance of a contract
- KVKK Art. 5/2-ç: Being necessary for the data controller to fulfil its legal obligation
- KVKK Art. 5/2-e: Being necessary for the establishment, exercise or protection of a right
- KVKK Art. 5/2-f: Being necessary for the legitimate interest of the data controller (provided that it does not harm the fundamental rights and freedoms of the data subject)
- KVKK Art. 5/1: Explicit consent (for marketing communication and optional cookies)
6. Rights of the Data Subject
Pursuant to Article 11 of the KVKK, as a data subject you have the following rights:
- To learn whether your personal data is being processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether it is used in accordance with that purpose
- To know the third parties to whom your personal data is transferred at home or abroad
- To request the correction of your personal data if it has been processed incompletely or incorrectly
- To request the deletion or destruction of your personal data within the conditions stipulated in Article 7 of the KVKK
- To request that any correction, deletion or destruction operations be notified to the third parties to whom the data is transferred
- To object if a result against you arises from the analysis of the processed data exclusively through automated systems
- To request the remedy of the damage if you suffer loss due to the unlawful processing of personal data
7. Application Method
To exercise the rights stated above, in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller, you may apply through one of the following methods with a petition containing information that verifies your identity and clearly stating the right you wish to exercise:
- In writing: Mahmutbey Mh. 2536. Sk. Prime Suites No:5/63, Bağcılar, İstanbul
- By e-mail (from your e-mail address registered in our system): info@prosesdanismanlik.com.tr
Your applications are concluded free of charge within thirty days at the latest, depending on their nature. If the process additionally requires a cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.
You are deemed to have read this Disclosure Text and to have been informed that your personal data will be processed as stated above.