General Privacy Notice under KVKK

Under Personal Data Protection Law No. 6698 (“KVKK”), the data controller is Denisoft Yazılım Sanayi Ticaret Limited Şirketi (“Denisoft” or the “Company”). Its identity and contact details are: MERSİS No: 0291207880200001 · Trade Registry No: 43171 · Sakarya Trade Registry Office; Gümrükönü Tax Office · Tax ID: 2912078802; Registered office: İstiklal Mah. 335. Sk. Bu Yapı Diamond Sitesi C Blok No: 50C İç Kapı No: 7 Serdivan / Sakarya · Phone: 0 531 022 92 96 · Email: info@denisoft.com.tr.

Depending on your relationship with Denisoft, the categories below may be processed. The Company does not request special categories of personal data unless required for the service; do not enter such data in free-text fields.

• Identity data: first name, last name and customer type
• Contact data: email address, telephone number, address and city
• Customer transaction data: requests, quotes, orders, agreements, products, delivery, support, withdrawal and refund records
• Financial and billing data: registered name, tax office/number, billing details, transaction and payment result; Denisoft does not store card numbers, CVV or expiry dates
• Transaction security data: IP address or its one-way hash, date and time, session, device/browser and application logs
• Service-related data: the domain to be analysed, public website data, analysis findings and generated reports
• Marketing data: commercial communication preferences and consent records, only where permission is given

Personal data is processed under the conditions in Article 5 of KVKK: necessity for establishing or performing a contract, fulfilling the controller's legal obligations, establishing, exercising or protecting a right, and legitimate interests where fundamental rights are not harmed. Explicit consent is obtained where required by law.

• Managing enquiries and quotations, assessing customer needs and communicating
• Creating orders, establishing and performing agreements, verifying payment results, and managing invoicing and accounting
• Managing website analysis, report production, digital delivery, support, cancellation, refunds and disputes
• Information security, preventing abuse, keeping transaction records, service continuity and investigating errors
• Meeting statutory retention, notification and audit obligations and requests from authorised bodies
• Sending campaign, content and promotional messages only with separate, freely given permission

Personal data is collected through contact, free analysis, order and support forms on denisoft.com.tr; email and telephone communications; payment provider notifications; contract and invoice processes; and web server and security records, by fully or partially automated means, or non-automated means forming part of a data filing system.

Personal data may be transferred only to the extent needed for the relevant purpose and subject to Articles 8 and 9 of KVKK: to PayTR or iyzico for the selected payment; hosting, IT, email and notification providers; accountants and authorised invoicing/accounting providers; legal and audit advisers; and legally authorised public bodies. If AI features are enabled for the quality and narrative layer of paid reports, business descriptions, target regions, public digital profile links and necessary analysis findings may be sent to the AI/API provider OpenAI. Card details, passwords and special categories of personal data are excluded. Services involving international transfers are used only after the transfer conditions and appropriate safeguards under Article 9 of KVKK have been met.

Personal data is retained for the time necessary for its purpose and the mandatory periods under tax, commercial, consumer, contract and evidence legislation. At the end of these periods, data is deleted, destroyed or anonymised unless an ongoing dispute or legitimate legal need requires retention. Denisoft applies appropriate technical and organisational measures, including access control, secure connections, logging and monitoring, protection of sensitive fields, backups and incident management.

Under Article 11 of KVKK, you may apply to the data controller to exercise the following rights.

• Learn whether your personal data is processed and request information if it is
• Learn the purpose of processing and whether your data is used accordingly
• Know the third parties receiving your personal data in Turkey or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under the conditions set out in KVKK
• Request that corrections, deletions or destruction be notified to third-party recipients
• Object to an adverse result arising solely from automated analysis
• Request compensation for damage caused by unlawful processing

Submit KVKK requests clearly identifying yourself and your request in signed writing to İstiklal Mah. 335. Sk. Bu Yapı Diamond Sitesi C Blok No: 50C İç Kapı No: 7 Serdivan / Sakarya, or email info@denisoft.com.tr from the address previously supplied to and registered with the Company. Secure electronic signatures, mobile signatures and other legally accepted methods may also be used.

Applications must include your full name, signature if made in writing, Turkish identity number or foreign passport/identity number, notification address, registered email and phone if available, and the subject of the request. Applications are normally resolved free of charge as soon as possible and within thirty days. If additional costs arise, the tariff set by the Personal Data Protection Board may apply.