Skip to content

Privacy Notice (KVKK)

Last updated:

LEGAL DRAFT – This text is a draft prepared based on the current operation of the Palm Yazılım website. It should be reviewed by a lawyer and the information in square brackets completed before publication.

This privacy notice has been prepared pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about your personal data processed through our website and communication channels.

Data controller

Your personal data is processed by Palm Yazılım in its capacity as data controller.

  • Trade name: [CONTENT REQUIRED: trade name or the full name of the sole proprietor]
  • Address: [CONTENT REQUIRED: full address]
  • Email: [CONTENT REQUIRED: email address for KVKK requests]
  • Registered electronic mail (KEP) address: [CONTENT REQUIRED: KEP address, if any]

Personal data processed

  • Identity information: First and last name.
  • Contact information: Email address and phone number.
  • Customer transaction information: Company name, website address, type of service requested, project stage, goal and target audience, project description and message content.
  • Transaction security information: IP address and browser information. [LEGAL REVIEW: Confirm whether these fields are stored in contact form records.]
  • Usage information: If you consent to analytics cookies, data on how the site is used (pages visited, visit duration, device and browser type).

Purposes of processing personal data

  • To respond to the questions and requests you send through the contact, quote and quick quote forms,
  • To prepare a quote suited to your request and conduct pre-contract discussions,
  • To deliver our software and design services if a contract is concluded,
  • To ensure information security and prevent misuse,
  • To fulfil our legal obligations,
  • To measure and improve the use of the website, if you give your consent.

Your personal data is processed on the basis of the following legal grounds set out in Article 5 of the KVKK:

  • Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c),
  • Processing is necessary for the data controller to fulfil its legal obligation (Art. 5/2-ç),
  • The legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f),
  • Your explicit consent, in respect of analytics cookies (Art. 5/1).

Method of collection

Your personal data is collected through the contact, quote and quick quote forms on our website, by email and by phone, and partly by automated means (cookies).

Transfer of personal data

Your personal data is not sold or rented to third parties for commercial purposes. Data may only be transferred in the following cases:

  • To authorized public institutions and organizations upon request, within the scope of a legal obligation,
  • To the infrastructure providers we use for hosting the website and storing form records. [CONTENT REQUIRED / LEGAL REVIEW: The service providers (e.g. Vercel Inc., Supabase Inc.) and the countries where their servers are located should be specified; the conditions under KVKK Art. 9 should be assessed for transfers abroad.]
  • To Google LLC, if you consent to analytics cookies. [LEGAL REVIEW: legal basis for transfer abroad.]

Retention period

Your personal data is retained for as long as required by the purpose of processing and for the periods set out in the applicable legislation; at the end of these periods, it is deleted, destroyed or anonymized. [CONTENT REQUIRED: Retention period for form records, e.g. a set period after the request is concluded.]

Your rights under the KVKK

Pursuant to Article 11 of the KVKK, by applying to the data controller, you have the right to:

  • Learn whether your personal data is being processed,
  • Request information about it if it has been processed,
  • Learn the purpose of processing and whether the data is used in line with that purpose,
  • Know the third parties in Türkiye or abroad to whom the data has been transferred,
  • Request correction if the data has been processed incompletely or inaccurately,
  • Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK,
  • Request that the correction, deletion and destruction be notified to third parties to whom the data has been transferred,
  • Object to an outcome against you arising from the analysis of the processed data exclusively through automated systems,
  • Claim compensation if you suffer damage due to unlawful processing.

How to apply

You can submit requests regarding your rights in writing to the address above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, via our registered electronic mail (KEP) address, or from the email address registered in our system to [CONTENT REQUIRED: application email address]. Depending on its nature, your application will be concluded free of charge within thirty days at the latest.