Information Notice Under Turkish Personal Data Protection Law No. 6698
As TABBYTE TECHNOLOGIES LTD, we attach great importance to the security of your personal data. This notice has been prepared as the data controller to inform you within the scope of the Personal Data Protection Law No. 6698 ("KVKK").
1. Data Controller
Company: TABBYTE TECHNOLOGIES LTD
Address: London, United Kingdom
Email: info@e9e.io
2. Personal Data Processed
The following personal data belonging to you is processed:
2.1. Identity Data
- Name, surname
- Turkish ID number (for invoicing)
- Tax number (for corporate accounts)
2.2. Contact Data
- Email address
- Phone number
- Address information
2.3. Customer Transaction Data
- Order and invoice information
- Payment information
- Request and complaint records
2.4. Marketing Data
- Purchase history
- Preferences and interests
- Survey and campaign participation data
2.5. Digital Data
- IP address
- Cookie data
- Session information
- Device information
2.6. Lead (Prospective Customer) Data
- Business name, address, phone, email address, website
- Professional profile information (name, job title, company name, location)
- Social media profile information (username, bio, follower count)
- Business rating and category information
- Geographic location information
Note: This data is compiled from publicly available sources (map services, search engines, professional networks, social media, corporate websites).
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Performing membership procedures
- Providing and improving services
- Executing order and payment transactions
- Customer services and support activities
- Fulfilling legal obligations
- Security and fraud prevention
- Marketing and campaign activities (with your consent)
- Statistical analysis and reporting
- Following legal proceedings
- Data collection, compilation, and enrichment from publicly available sources to provide lead information to our users
- AI-powered lead scoring and prioritization
- Lead data verification and currency checks
4. Legal Reasons for Processing Personal Data
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:
- Explicit consent: For marketing activities
- Contract performance: For service delivery
- Legal obligation: For fulfilling legal requirements
- Legitimate interest: For improving service quality and security
- Legitimate interest (KVKK Art. 5/2-f): Compilation and provision of lead data from publicly available sources to users
5. Transfer of Personal Data
Your personal data may be shared with the following parties:
5.1. Domestic Transfers
- Business partners and suppliers
- Payment service providers
- Logistics companies
- Legal advisors
- Authorized public institutions and organizations
5.2. International Transfers
Your personal data may be transferred abroad to countries with adequate protection or by taking appropriate security measures to provide services.
Countries to which transfers are made:
- European Union countries
- United States (under Standard Contractual Clauses)
- United Kingdom
Service Provider Categories:
- Cloud infrastructure services (server hosting, database)
- Search engine API services
- Web data collection and enrichment services
- Artificial intelligence and natural language processing services
- Email delivery infrastructure
All international transfers are carried out with necessary security measures (Standard Contractual Clauses, commitments) within the scope of KVKK Art. 9.
6. Data Retention Periods
| Data Category | Retention Period | Legal Basis |
|---|
| Identity and Contact Data | During membership + 10 years | TTK, VUK |
| Transaction and Invoice Data | 10 years | VUK Art. 253 |
| Log Records | 2 years | Law No. 5651 |
| Marketing Data | Until consent is withdrawn | KVKK Art. 5 |
| Lead (Prospective Customer) Data | While user account is active, deleted within 30 days upon request | KVKK Art. 5/2-f (Legitimate Interest) |
7. Your Rights Under KVKK
Pursuant to Article 11 of KVKK, you have the following rights:
- To learn whether your personal data has been processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose
- To know the third parties to whom your personal data is transferred domestically or abroad
- To request the correction of your personal data if it has been processed incompletely or incorrectly
- To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of KVKK
- To request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred
- To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems
- To claim compensation for damages if you suffer damage due to unlawful processing of your personal data
8. How to Apply
You can apply through the following methods to exercise your rights under KVKK:
- Written application: Deliver to our company address with ID documents
- Email: Send from your registered email to info@e9e.io
- Web Form: Submit online through the Data Request Form
- In-app: Use the "KVKK Request" option in account settings
9. Contact
For all KVKK-related questions:
- Data Controller: TABBYTE TECHNOLOGIES LTD
- Email: info@e9e.io
- Address: London, United Kingdom
