LEGAL INFORMATION
Privacy Notice on the Protection and Processing of Personal Data
Data Controller
Under Turkish Personal Data Protection Law No. 6698 (“Law” or “KVKK”), your personal data may be processed as described below by ENTROBOT Finansal Teknolojiler A.Ş. (“Company”), acting as the data controller.
Contact Details of the Data Controller
- Address: Esentepe Mah. Harman 1 Sk. Duran İş Merkezi, No 4A Şişli/Istanbul, Türkiye
- Email: info@ent-robot.com
- Website: www.ent-robot.com.tr
This Privacy Notice has been prepared under Article 10 of the Law to explain which personal data the Company processes as data controller, the purposes and legal grounds of processing, recipients and transfer purposes, collection methods, and the rights of data subjects.
Personal Data Processed, Purposes and Legal Grounds
Your personal data is processed in connection with the Company’s activities for the purposes and on the legal grounds under Article 5 of the Law set out below:
| Personal data category | Purpose of processing | Legal ground |
|---|---|---|
| Identity information (name, surname, title, etc.) | Establishing and managing customer and supplier relationships and conducting contractual processes | Processing is necessary for the establishment or performance of a contract (KVKK Art. 5/2-c) |
| Contact information (telephone, email, address, etc.) | Conducting communications, preparing quotations, providing after-sales support and responding to customer requests | Establishment or performance of a contract (Art. 5/2-c); legitimate interests of the data controller (Art. 5/2-f) |
| Customer transaction information | Quotations, orders, subscriptions, licensing, customer support, CRM activities and after-sales services | Establishment or performance of a contract (Art. 5/2-c); legitimate interests of the data controller (Art. 5/2-f) |
| Financial information | Invoicing, collections, accounting records and reconciliation processes | Establishment or performance of a contract (Art. 5/2-c); compliance with the data controller’s legal obligations (Art. 5/2-ç) |
| Transaction security data (IP address, logs, session and device information, etc.) | Information security, user verification, authorization, system security, prevention of unauthorized access, cybersecurity, audit and record integrity | Expressly provided for by law (Art. 5/2-a); compliance with legal obligations (Art. 5/2-ç); legitimate interests (Art. 5/2-f) |
| Legal transaction information | Following legal disputes and establishing, exercising or protecting rights | Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e) |
| Request and complaint information | Assessing and resolving requests, suggestions and complaints | Legitimate interests (Art. 5/2-f); establishment, exercise or protection of a right (Art. 5/2-e) |
| Marketing and commercial communication information | Sending commercial electronic communications and conducting campaigns, promotions and marketing activities | Explicit consent (KVKK Art. 5/1) and commercial electronic communication consent under applicable legislation |
Method of Collection
Your personal data is collected by wholly or partly automated means through website forms, software infrastructure, cookies, system logs and digital tools, or by non-automated means through physical documents you provide.
Transfer of Personal Data
For the purposes described above and subject to the conditions and safeguards under Articles 8 and 9 of the Law, your personal data may be transferred to competent public authorities to satisfy statutory reporting and audit obligations; to the Company’s advisers, lawyers, certified public accountants and independent auditors for legal, accounting and financial audit processes; and to authorized infrastructure and software providers located in Türkiye or abroad for service continuity, form security, email delivery, server hosting, data storage and information-security operations. A transfer outside Türkiye will take place only where an appropriate safeguard or another lawful transfer condition under Article 9 of the Law is available.
Retention Period
Your personal data is retained for the statutory periods required by applicable legislation or for as long as necessary for the purpose of processing. Under Article 7 of the Law, when the reasons requiring processing cease to exist or statutory retention periods expire, the data is deleted, destroyed or anonymized by the Company on its own initiative or upon your request.
Data Subject Rights and Application Method
To exercise your rights under Article 11 of the Law, you may submit an application in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- By personally delivering a signed petition, or sending it through a notary public, to Esentepe Mah. Harman 1 Sk. Duran İş Merkezi, No 4A Şişli/Istanbul, Türkiye; or
- By email to info@ent-robot.com.
Your application must include your name, surname, Turkish identity number (passport number for foreign nationals), address for notification, and the subject of your request. Requests will be concluded free of charge as soon as possible and no later than 30 days. Where the process requires an additional cost, the fee in the tariff determined by the Turkish Personal Data Protection Board may be charged.
Contact Form Privacy Notice →