Data Protection Notice (KVKK)

Who is the data controller?

Which of your personal data is processed?

Identity data: first name, last name; where an order is placed, national ID number or tax number.

Contact data: e-mail address, phone number, billing and delivery address.

Customer transaction data: records of requests and complaints, order and payment history, correspondence.

Transaction security data: IP address, browser details, access logs, cookie records.

Financial data: invoice details, bank transfer receipt details. Credit card details are not processed or stored by us; the payment itself takes place on the infrastructure of an authorized payment institution.

For what purposes is your personal data processed?

• Assessing and answering your requests and quote enquiries
• Running contract processes and performing the service
• Invoicing and meeting financial obligations
• Managing customer support and complaint processes
• Keeping information secure and preventing misuse
• Where you have given explicit consent: sending campaign and announcement messages
• Making the notifications to authorized bodies that legislation requires

How is your personal data collected?

Data is collected through the forms on the website, e-mail, phone, WhatsApp and contract processes, by partly automated and partly non-automated means.

What is the legal ground?

Under Article 5 of the KVKK:

Who is your data transferred to?

Your personal data is shared, and only for the purpose at hand, with hosting and e-mail infrastructure providers, the payment institution or bank, the party providing accounting and financial advisory services, and with authorized public bodies on a lawful request. Where a service provider with servers abroad is used, the transfer is made in line with the conditions in Article 9 of the KVKK.

How long is your data kept?

• Request and quote records: 3 years
• Contract, invoice and commercial ledger records: 10 years
• Access and security logs: 1 year
• Contact records based on explicit consent: 3 years from the withdrawal of consent

Once the period ends, the data is deleted, destroyed or anonymized in line with our Personal Data Retention and Destruction Policy.

What are your rights under Article 11 of the KVKK?

As a data subject you have the right to:

1. Learn whether your personal data is being processed
2. Request information about it if it has been processed
3. Learn the purpose of the processing and whether the data is used in line with that purpose
4. Know the third parties, in Turkey or abroad, that the data has been transferred to
5. Ask for the data to be corrected if it is incomplete or wrong
6. Ask for the data to be deleted or destroyed under the conditions in Article 7 of the KVKK
7. Ask for corrections, deletions and destructions to be notified to the third parties the data was transferred to
8. Object to a result against you arising from analysis carried out solely by automated systems
9. Claim compensation if you suffer loss because of unlawful processing

How do you apply?

You can send your application, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller;

• by signed written petition to MTS İletişim Dış Ticaret Pazarlama Limited Şirketi, Trump Tower No: 12, İç Kapı No: 221, Kuştepe Mah. Mecidiyeköy Yolu Cad., 34387 Şişli / İstanbul,
• by registered electronic mail to —,
• or by e-mail to yakup@osbsabilisim.com.tr from the e-mail address you have previously given us and that is on record in our system.

Your application is concluded free of charge within 30 days at the latest. If the process involves a cost of its own, the fee in the tariff set by the Board may be charged.