Personal Data Protection and Processing Disclosure

1. Collection, Processing, and Purpose of Processing Personal Data

Your personal data is processed for purposes such as identifying the data owner’s identity and other required information, organizing all records and documents based on transactions in electronic or paper media, maintaining compliance with domestic and international regulations, and fulfilling obligations for data retention, reporting, and information sharing as mandated by authorities. The data is also used for planning, statistics, customer satisfaction, improving service quality, preventing fraud, and ensuring security. If you give consent, your personal data may also be processed for communication, promotion, marketing, and campaign activities.

2. To Whom and for What Purposes Processed Personal Data May BeTransferred

Collected personal data may be transferred to DITECH’s business partners, suppliers, DITECH officials, shareholders, legally authorized public institutions and private persons, partner organizations, financial institutions, support service providers, and independent audit companies, domestically or abroad, to fulfill our business activities as permitted by legislation.

3. Method and Legal Basis for Collecting Personal Data

Personal data is collected verbally, in writing, or electronically to provide DITECH’s products and services within the legal framework. Data collected for these legal reasons may also be processed and transferred for the purposes stated in articles (1) and (2) above, within the personal data processing conditions and purposes defined in Article 5 of the KVK Law.

4. Rights of the Personal Data Owner Under Article 11 of the KVK Law

If personal data owners submit their requests to DITECH in the manner specified in this Disclosure Text, DITECH will process the request free of charge within 30 days, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, DITECH will charge the applicable fee. In this context, personal data owners have the right to:

• Request information on whether their personal data is processed,
  Learn the purpose of processing and whether the data is used appropriately,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of incomplete or incorrect data and notification of such corrections to third parties to whom data was transferred,
• Request deletion or destruction of personal data if processing reasons no longer exist, and notification of such action to third parties to whom data was transferred,
• Object to any unfavorable outcome resulting from the exclusive analysis of processed data through automated systems,
  Seek compensation for damages if personal data is processed unlawfully.

5. Cases Where Consent Is Not Required

Under Article 5, paragraph 2 of the Personal Data Protection Law No. 6698, DITECH may process personal data without obtaining explicit consent in the following cases:

• If explicitly prescribed by law,
  When necessary for the establishment or performance of a contract,
• If it is mandatory for DITECH to fulfill its legal obligations,
• If data has been publicized by the data subject,
• If processing is necessary for the establishment, exercise, or protection of a right,
• If processing is necessary for DITECH’s legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.

6. Right to Application of the Personal Data Owner

In Accordance with Article 13, Paragraph 1 of the Personal Data Protection Law; to exercise the rights mentioned above, personal data owners must submit a signed request or petition including their identity and contact information, as well as a description of the rights they wish to use as specified in Article 11 of the Personal Data Protection Law (KVK Law), using one of the following methods:
By post or in person to the address: Business Istanbul B Block, Floor 13, Office 18-129B, Kadıköy/Istanbul
By scanning and sending via email to info@di-techs.io
Consent for Sharing and Processing of Personal Data
The customer (“the person applying for/receiving/who will receive service from DITECH Digital Technology Solutions Trade Inc. (“DITECH”) (Mernis No: 0295127369700001) under this consent declaration”) acknowledges that they have been given an option by DITECH regarding whether or not to allow the processing and sharing of their information, documents, and personal data as specified below. If they do not wish their data to be processed or shared as outlined, they have the right to withhold their consent. Upon approval of this document, the customer grants DITECH, as the data controller, the authority to provide all types of products and services, make any necessary notifications, verify their identity, conduct market research/analysis/promotions, organize all records and documents required as a basis for processing in electronic or paper form, comply with the information retention, reporting, and other obligations imposed by local and international legislation, tax laws, and international sanctions, as well as to request information and documents about the customer from relevant authorities and other institutions. The customer also accepts that the processing and sharing of their data and documents by DITECH under this article is not a violation of data protection obligations under Turkish law, that their personal data may be collected through DITECH’s service channels in verbal, written, or electronic form, and that any information and data related to their received services may be stored and/or processed in Turkey or abroad for DITECH’s data processing needs, system structure, necessary support services, insurance assessment purposes, or other reasons.