Privacy Notice

1. Data Controller

The data controller is Vesacons, established under the laws of the Republic of Türkiye. You may reach our company through the contact details available on our "Contact" page.

2. Categories of Personal Data Processed

Depending on the nature of our services and our relationship with you, Vesacons may process the following categories of personal data:

• Identity data (name, surname, national ID where legally required)
• Contact data (email, phone, address, country)
• Customer/partner data (company, role, contract information)
• Candidate and CV data (career applications)
• Website usage data (cookies, IP, browser, session data)
• Visual data (event photos, CCTV at offices during visits)

3. Purposes of Processing

Your personal data is processed in line with KVKK Articles 5 and 6 for the following purposes:

• Execution of services and contractual processes
• Customer relationship management and technical support
• Communication, marketing, and event activities (subject to explicit consent)
• Evaluation of career applications and HR processes
• Information security, log retention, and legal compliance
• Communication with authorized public institutions and authorities

4. Transfer of Personal Data

Your personal data may be transferred to our business partners, suppliers, cloud service providers (including SAP), authorized public institutions, and other third parties to whom transfer is legally required, within the limits set out in KVKK Articles 8 and 9. Cross-border transfers are performed under appropriate technical and organizational safeguards in line with applicable law.

5. Collection Methods and Legal Basis

Your personal data is collected through our website, email, phone, physical channels (office visits, events), contracts, and digital channels via fully or partially automated means. Our legal bases under KVKK Articles 5/2 and 6/3 include explicit statutory provisions, performance of a contract, compliance with legal obligations, legitimate interest, and explicit consent where required.

6. Your Rights (KVKK Article 11)

Under Article 11 of KVKK, you have the following rights as a data subject:

• Learn whether your personal data is processed
• Request information regarding the processing
• Learn the purpose of processing and whether data is used in line with this purpose
• Learn the third parties to whom data is transferred domestically or internationally
• Request rectification of incomplete or inaccurate data
• Request erasure or destruction within the scope of KVKK
• Request notification of rectification, erasure, and destruction actions to relevant third parties
• Object to outcomes arising solely from automated systems
• Request compensation for damages caused by unlawful processing

7. How to Submit a Request

To exercise the rights listed above, you may submit your request in writing to our company headquarters with documentation verifying your identity, or use other methods specified by the KVKK Board. You may use the addresses provided on our contact page. Your request will be responded to free of charge within thirty (30) days at the latest, depending on its nature.

8. Changes to This Notice

Vesacons may update this notice as needed in response to legal changes and updates to business processes. The updated version becomes effective on the date it is published on our website.