Data Protection Notice
Disclosure Notice under the Personal Data Protection Law No. 6698
Last updated: February 14, 2026
1. Data Controller
In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), as PNZ Medya Software, in the capacity of data controller, we process your personal data as described below.
- Company: PNZ Medya Software
- Address: Pendik, Istanbul, Turkey
- Email: info@pnzmedya.com
- Phone: 0530 145 34 82
2. Personal Data Processed
The following personal data belonging to you is processed:
| Data Category | Data Types |
|---|---|
| Identity Information | Name, surname |
| Contact Information | Email address, phone number, address |
| Professional Information | Company name, position/title |
| Digital Identity Data | IP address, cookie data, browser information |
| Transaction Security | Log records, access information |
| Request/Complaint Information | Form contents, meeting notes, project details |
3. Purposes of Personal Data Processing
Your personal data is processed for the following purposes:
- Receiving, evaluating, and fulfilling your service requests
- Preparing quotes and providing consulting services
- Meeting planning and managing communication processes
- Managing contract processes
- Customer satisfaction and relationship management
- Managing invoicing and accounting operations
- Analyzing and improving website performance
- Fulfilling legal obligations
- Managing information security processes
- Resolving legal disputes
4. Collection Method and Legal Basis
Your personal data is collected through automatic and non-automatic means via website forms, email, phone, WhatsApp, face-to-face meetings, and cookies.
Your personal data is processed based on the following legal grounds under Article 5 of the KVKK:
- Explicit consent: Marketing and newsletter
- Contract establishment/performance: Service delivery, quote preparation
- Legal obligation: Tax, accounting, and legal reporting
- Legitimate interest: Website security, service quality improvement
5. Data Transfer
Your personal data may be transferred to the following recipient groups within the framework of Articles 8 and 9 of the KVKK:
- Business partners: Hosting, server, and email service providers
- Legal advisors: Legal process management
- Authorized public institutions: Within legal obligations
- Accountant/accounting: Invoice and tax transactions
Your personal data may be transferred abroad to countries with adequate protection or in cases where adequate protection is ensured.
6. Data Retention Periods
Your personal data is stored for the period required by the processing purpose:
| Data Type | Retention Period |
|---|---|
| Contact form data | 2 years after transaction completion |
| Contract data | 10 years after contract ends |
| Invoice/accounting data | 5 years (Tax Procedure Law) |
| Log records | 2 years (Law No. 5651) |
| Cookie data | Varies by cookie type |
7. Data Security Measures
The following measures are taken for the security of your personal data:
Technical Measures
- SSL/TLS encryption
- Firewall
- Penetration testing and security scans
- Access control and authorization mechanisms
- Data backup and recovery systems
- Updated anti-virus and security software
Administrative Measures
- Confidentiality agreements
- Employee awareness training
- Data processing policies and procedures
- Regular audit and control mechanisms
- Data breach response plan
8. Your Rights as a Data Subject
Under Article 11 of the KVKK, you have the following rights:
- Learning whether your personal data is being processed
- Requesting information if your personal data has been processed
- Learning the purpose of processing your personal data and whether it is used in accordance with its purpose
- Knowing the third parties to whom your personal data has been transferred domestically or abroad
- Requesting correction if your personal data has been processed incompletely or incorrectly
- Requesting deletion or destruction of your personal data under the conditions set forth in Article 7 of the KVKK
- Requesting that correction, deletion, and destruction operations be notified to third parties to whom your personal data has been transferred
- Objecting to the emergence of a result against you through the analysis of processed data exclusively by automated systems
- Requesting compensation for damages in case your personal data has been processed unlawfully
9. Application Method
You can apply through the following methods to exercise the rights stated above:
| Application Method | Address / Info |
|---|---|
| info@pnzmedya.com | |
| PNZ Medya Software, Pendik, Istanbul, Turkey | |
| In-Person Application | Application to our office with identity verification |
Your application must include your name, surname, national ID number, contact information, and details of your request. Applications are responded to free of charge within 30 days at the latest. If the process requires an additional cost, the tariff determined by the Personal Data Protection Board shall apply.
10. Right to Complain to the Board
In cases where your application is rejected, the response is found insufficient, or no response is given within the period; you may file a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response, and in any case within 60 days from the date of application.
Personal Data Protection Authority:
Web: www.kvkk.gov.tr