Data Protection Notice

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data, the data controller for your personal data is:

In this notice, My Dijital Medya Grup Limited Şirketi and Coreon are referred to together as "Coreon" or "the Company".

2. Personal Data We Process

Depending on how you contact Coreon and which services you use, the following personal data may be processed:

• Identity data: first name, surname and any other identifying details you share with us.
• Contact data: email address, phone number, company name and contact preferences.
• Customer transaction data: quote requests, project requirements, meeting notes, and information relating to orders, contracts and support processes.
• Transaction security data: IP address, access time, browser and device information, error and security logs.
• Legal process data: official applications, notices and requests, and records relating to legal disputes.
• Cookie and usage data: website preferences and, where you have given permission, analytics usage data.

Unless the nature of our services requires it, Coreon does not request special categories of personal data. Please do not enter health information, biometric data or similar special category data into our contact forms.

3. Purposes of Processing

Your personal data may be processed for the following purposes:

• receiving and responding to enquiries and quote requests,
• assessing project requirements and preparing proposals,
• delivering software development, consultancy, maintenance and support services,
• managing customer relationships and contract processes,
• resolving requests, complaints and support tickets,
• maintaining the security and technical continuity of the website,
• preventing unauthorised access and attempted misuse,
• meeting legal and financial obligations,
• establishing, exercising or protecting a right,
• improving service quality and the user experience,
• where separate explicit consent and the required commercial message approval exist, sending promotional and marketing communications.

4. Collection Method and Legal Basis

Your personal data may be collected by automated or partly automated means through website contact forms, email, phone calls, online meetings, contracts, support requests, server logs and cookies.

Depending on the processing activity, personal data is processed on the following legal bases set out in Article 5 of Law No. 6698:

• direct relation to the conclusion or performance of a contract,
• compliance with a legal obligation of the data controller,
• establishment, exercise or protection of a right,
• the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed,
• express provision in law,
• the explicit consent of the data subject where required.

For processing that requires explicit consent, the information notice and the consent statement are presented separately. Accepting this notice does not by itself constitute explicit consent.

5. Transfer of Personal Data

Limited to and proportionate with the purpose of processing, your personal data may be transferred to the following groups of recipients:

• hosting, server, backup and IT service providers,
• email and corporate communication infrastructure providers,
• software, security, maintenance and technical support providers,
• accountants, legal advisers and independent auditors,
• banks and payment service providers,
• competent public authorities, courts and enforcement offices,
• other parties entitled to receive information under a legal obligation.

If personal data needs to be transferred abroad because a service provider is located outside Türkiye, the transfer is carried out in accordance with the conditions and appropriate safeguards set out in Article 9 of Law No. 6698.

6. Retention of Personal Data

Your personal data is retained for as long as necessary for the purpose for which it is processed, taking into account the retention, limitation and evidential periods set out in the applicable legislation.

When the retention period expires or the purpose of processing ceases to exist, personal data is deleted, destroyed or anonymised in accordance with the law.

7. Your Rights as a Data Subject

Under Article 11 of Law No. 6698, by applying to Coreon you have the right to:

• find out whether your personal data is being processed,
• request information if it has been processed,
• learn the purpose of processing and whether the data is used accordingly,
• know the third parties in Türkiye or abroad to whom the data has been transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of the data where the legal conditions are met,
• request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
• object where an outcome to your detriment arises from analysis carried out solely by automated systems,
• claim compensation if you suffer damage as a result of unlawful processing.

8. How to Apply

You can submit your requests under Law No. 6698, together with information verifying your identity and the details of your request, using one of the following methods:

• In writing to: Ümitköy 2512. Sk. 1/27 Çankaya/Ankara, Türkiye
• From the email address you previously notified to Coreon and which is registered in our systems: [email protected]
• By registered electronic mail, secure electronic signature, mobile signature or other application methods accepted under the legislation.

Your application must include your first name and surname; a signature where a signed application is required; your Turkish ID number if you are a citizen of the Republic of Türkiye, or your passport or ID number if you are a foreign national; your address for service; your email and phone number if available; and the subject of your request.

Applications are concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process incurs an additional cost, the fees in the tariff set by the Turkish Personal Data Protection Board may apply.