Personal Data Protection Notice (KVKK)

01Data controller

Under KVKK, your personal data is processed by AsyncTech, in its capacity as data controller, within the framework described below.

02Personal data processed

Depending on the nature of your relationship with us, the following categories of personal data may be processed:

• Identity and contact information: first name, last name, email address, telephone number, the organisation you work for and your job title (when you contact us by email, telephone or WhatsApp, or request a meeting).
• Request and communication information: the content of the messages, requests and meeting notes you provide to us; correspondence relating to proposal and contract processes.
• Customer transaction information: where a business relationship is established, information relating to project, proposal, contract, invoicing and payment processes.
• Transaction security information: the IP address, date and time, and browser and device information recorded in server logs during your visit to the website.
• Cookie and usage information: your language preference and the page view and interaction statistics collected through Google Analytics (for details, see the Privacy Policy).

No data is collected through forms on our website. We kindly ask that you do not share special categories of personal data (such as health, religion or ethnic origin) with us; such data is neither requested nor processed.

03Purposes of processing

Your personal data is processed for the following purposes, in a manner that is related, limited and proportionate to those purposes:

• Responding to your contact requests and scheduling calls and meetings with you,
• Preparing proposals for our services and products, carrying out contract processes and providing our services,
• Carrying out finance, accounting and invoicing processes,
• Ensuring the security of the website and identifying and resolving technical issues,
• Improving content and user experience by statistically analysing how the website is used,
• Fulfilling obligations arising from legislation and responding to requests from authorised public institutions and organisations,
• Exercising and protecting our legal rights in the event of potential disputes.

04Collection method and legal grounds

Your personal data is collected partly by automated and partly by non-automated means, through channels such as email, telephone, WhatsApp, face-to-face or online meetings, and contract and proposal documents, as well as through server logs and cookies during your visit to our website.

This data is processed on the basis of the following legal grounds set out in Article 5 of KVKK:

• Processing is directly related to the conclusion or performance of a contract (Article 5(2)(c)): proposal, contract and service processes,
• Processing is necessary to comply with a legal obligation (Article 5(2)(ç)): retention and notification obligations arising from tax, commercial and other legislation,
• Processing is necessary for the establishment, exercise or protection of a right (Article 5(2)(e)): potential disputes,
• Processing is necessary for our legitimate interests (Article 5(2)(f)): responding to contact requests, website security and remembering your language preference,
• Your explicit consent (Article 5(1)): processing that does not rely on any of the grounds above, such as non-essential analytics cookies.

05Transfer of personal data

Your personal data may be transferred to the following groups of recipients to the extent necessary to achieve the purposes above and in accordance with the conditions set out in Articles 8 and 9 of KVKK:

• Our suppliers providing hosting, email, cloud and information technology services,
• Our business partners providing accounting, financial advisory and legal advisory services,
• Public institutions and organisations legally authorised to request such data, upon their request.

The Google Analytics and Google Fonts services used on our website, and communication conducted via WhatsApp should you choose to use it, are provided through service providers whose servers may be located abroad. Transfers in this context are carried out in accordance with the procedures and principles set out in Article 9 of KVKK.

06Retention period

Your personal data is retained for the period necessary for the purpose for which it is processed and for the limitation and retention periods prescribed by the applicable legislation. Upon expiry of these periods, your data is erased, destroyed or anonymised. The retention periods of cookies are set out in the Privacy Policy.

07Your rights under KVKK

Pursuant to Article 11 of KVKK, you may exercise the following rights by applying to the data controller:

1. To learn whether your personal data is being processed,
2. To request information about the processing if your personal data has been processed,
3. To learn the purpose of the processing and whether your personal data is used in accordance with that purpose,
4. To know the third parties, in Türkiye or abroad, to whom your personal data has been transferred,
5. To request the rectification of your personal data if it has been processed incompletely or inaccurately,
6. To request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of KVKK,
7. To request that the rectification, erasure and destruction operations be notified to the third parties to whom your personal data has been transferred,
8. To object to any outcome to your detriment arising from the analysis of your personal data exclusively through automated systems,
9. To claim compensation for damages if you suffer loss as a result of the unlawful processing of your personal data.

08How to submit a request

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests concerning your rights by sending a written petition containing information that identifies you and your request to our address, or by sending an email to info@asynctech.com.tr from the email address registered in our system or signed with a secure electronic signature or mobile signature.

Your request will be concluded free of charge within 30 days at the latest, depending on its nature. Where the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.