Personal Data Protection Notice (KVKK)

Data Controller

Your personal data is processed by Bilnet Yazılım Teknolojileri A.Ş. (“Bilnet”) as the data controller, within the scope described in this notice.

Personal Data We Process

The following categories of personal data may be processed through our website:

• Identity data: first and last name.
• Contact data: email address and phone number.
• Professional data: company or organization name, the service you're interested in, project scope and budget, and other information you voluntarily enter in our forms.
• Request data: notes and message content you send through our forms.
• Marketing data: the email address you share to subscribe to our newsletter.
• Candidate data: education, experience and résumé information and profile links you share in job applications.
• Transaction security data: technical records such as IP address, browser and device information, and access times.

Purposes of Processing

• Receiving and evaluating your quote, demo, discovery and callback requests, and contacting you.
• Carrying out pre-contractual processes for the products and services you request.
• Sending newsletters and informational messages where you have given explicit consent.
• Ensuring the security of the website and preventing abuse and automated (bot) submissions.
• Evaluating job and internship applications and running recruitment processes.
• Running information security processes and fulfilling legal obligations.
• Responding to information and document requests from authorized institutions and organizations.

Method of Collection and Legal Grounds

Your personal data is collected partly or fully by automated means through the contact, quote, demo and newsletter forms on our website, and through technical records generated while you use the site.

This data is processed on the following legal grounds set out in Article 5 of KVKK:

• It is directly related to the conclusion or performance of a contract (Art. 5/2-c).
• It is necessary for the data controller to fulfill its legal obligations (Art. 5/2-ç).
• It is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f).
• Your explicit consent, where no other legal ground applies — for example, for sending commercial electronic messages or evaluating your application during recruitment (Art. 5/1).

Transfer of Personal Data

Your personal data may be transferred to the following recipient groups, limited to the purposes stated above and in accordance with Articles 8 and 9 of KVKK:

• The email infrastructure service provider used to deliver form notifications.
• The server and infrastructure service providers hosting the website.
• Legally authorized public institutions and organizations and judicial authorities.

Because the email infrastructure provider's servers may be located abroad, such transfers are carried out in accordance with the conditions set out in Article 9 of KVKK.

Retention Period

Your personal data is retained for as long as required by the purpose of processing and for the periods prescribed by applicable legislation. When these periods end, your data is deleted, destroyed or anonymized.

Your Rights Under KVKK

Under Article 11 of KVKK, you may apply to the data controller to exercise the following rights:

• To learn whether your personal data is processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing and whether the data is used in line with that purpose.
• To know the third parties to whom your data is transferred in Türkiye or abroad.
• To request correction if your data is incomplete or inaccurate.
• To request deletion or destruction of your data under the conditions set out in Article 7 of KVKK.
• To request that corrections, deletions and destructions be notified to third parties to whom the data has been transferred.
• To object to an outcome against you arising from the analysis of your data exclusively through automated systems.
• To claim compensation for damages if you suffer harm due to unlawful processing.

How to Apply

You can submit requests regarding your rights in writing, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or via registered electronic mail (KEP), a secure electronic signature or the email address you previously provided to us, to info@bilnet.com.tr.

Your application should include your name, contact details and the subject of your request. Requests are resolved free of charge within thirty days at the latest, depending on their nature; if the process requires an additional cost, the fee schedule determined by the Personal Data Protection Board may apply.