KVKK & GDPR

Identity of Data Controller
Company: Mehmet Yunus Bağışlar (AddFirmo)
Address: Bahçelievler Mah. Bağcılar Cad. Ödük Sokak Orak Apt. No:3 Kat:3 Daire:8 Bahçelievler / İstanbul
Contact: +90 543 760 02 03 | info@addfirmo.com

1. Objective and Scope

The purpose of this document is to inform individuals whose personal data is processed by Mehmet Yunus Bağışlar ("Company") about the processing activities in accordance with the Law No. 6698 on Protection of Personal Data ("KVKK") and the General Data Protection Regulation ("GDPR").

2. Principles of Processing

We process personal data based on the following principles:

• Lawfulness, fairness, and transparency.
• Accuracy and keeping up to date.
• Processing for specified, explicit, and legitimate purposes.
• Being limited, relevant, and proportionate to the purpose of processing.
• Retention for the period required by relevant legislation or for the purpose of processing.

3. Processed Data Categories

We may process the following categories of data:

• Identity: Name, surname, T.C. identity number (if applicable).
• Contact: Email address, phone number, address.
• Customer Transaction: Order information, request/complaint records.
• Transaction Security: IP address, log records, password hashes.
• Marketing: Cookie records, survey responses.

4. Transfer of Personal Data

Personal data may be transferred to service providers (e.g., cloud hosting, payment infrastructure), legal consultants, and authorized public institutions in compliance with Articles 8 and 9 of KVKK and relevant GDPR articles regarding international data transfers.

5. Security Measures

The Company takes all necessary technical and administrative measures to prevent unlawful processing of personal data, prevent unlawful access to data, and ensure data preservation. This includes encryption (SSL), firewalls, and access controls.

6. Rights of the Data Subject

Under Article 11 of KVKK and Chapter 3 of GDPR, you have the right to:

• Request information about whether your personal data is processed.
• Request correction of your data if it is incomplete or incorrect ("Right to Rectification").
• Request deletion or destruction of your data ("Right to Erasure" / "Right to be Forgotten").
• Object to the processing of your data for automated decision-making or profiling.
• Request the portability of your data to another service provider.
• Withdraw your consent at any time.

7. Application to Data Controller

You may submit your requests regarding your rights in writing to our address or via email to info@addfirmo.com. We will respond to your request within 30 days free of charge.