Privacy Policy

What this policy covers

This Privacy Policy concerns the data collected through the osbsabilisim.com.tr website, operated by MTS İletişim Dış Ticaret Pazarlama Limited Şirketi ("OSBSA Bilişim", "we"). We are not responsible for the privacy practices of the third-party sites we link to.

For details on how personal data is processed under the Turkish Personal Data Protection Law No. 6698 (KVKK), see our Data Protection Notice (KVKK) page.

What data we collect

Two kinds of data are collected on the site:

1. Data you give us yourself. What you send when you fill in the contact form, the quote form or the order form:

• First and last name
• Company name (optional)
• E-mail address
• Phone number
• The message and the details of your request
• If you are placing an order: billing address, tax office and tax or national ID number

2. Data collected automatically. The records that come into being technically when you visit the site:

• IP address
• Browser and operating system details
• Pages visited and the time of the visit
• Where you arrived from (referring address)

Why we process this data

Who we share data with

We do not sell your personal data. We share it only with the parties needed to run the service, and only as far as that requires:

• Hosting and infrastructure providers: to keep the site running
• E-mail delivery provider: for form notifications and confirmation e-mails
• Payment institution or bank: to carry out the payment (card details never reach our server)
• Accounting and financial advisory services: for invoices and statutory ledgers
• Authorized public bodies: on a lawful request and to the extent requested

How long your data is kept

• Contact and quote form records: 3 years from the closing of the request
• Contract and invoice records: 10 years, as the Tax Procedure Law (Vergi Usul Kanunu) and the Turkish Commercial Code (Türk Ticaret Kanunu) require
• Server access logs: 1 year
• Consent records for commercial electronic messages: 3 years from the withdrawal of consent

Data whose retention period has run out is deleted, destroyed or anonymized.

What we do about data security

• Site traffic is encrypted with SSL/TLS.
• Passwords are stored with a one-way hash; no password is kept as plain text.
• Access to the admin panel is limited by authorization and every access is logged.
• Forms use rate limiting and bot verification.
• Database backups are taken regularly and access to them is restricted.

No technical measure makes security absolute. If we establish that your data has been accessed unlawfully, we will inform you and the Personal Data Protection Board within the time and in the manner the legislation lays down.

Cookies

The site uses cookies that are strictly necessary for it to work, plus analytics cookies that depend on your consent. See our Cookie Policy page for the details. You can block cookies from your browser settings at any time; some parts of the site may then stop working.

Your rights

Under Article 11 of the KVKK you have the right to learn whether your data is being processed, to ask for information about it if it is, to have it corrected or deleted, to request that the processing be restricted and to object. How to apply is set out on the Data Protection Notice (KVKK) page.

Does this policy change?

This policy may be updated when legislation changes or our services change. The current version is always published on this page and the "last updated" date at the top of the page is changed with it.

Contact