GDPR | Fabionis

This information notice has been prepared by FABIONIS BILISIM LIMITED COMPANY (“Fabionis” or the “Company”) to inform you, in line with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), about how your personal data is collected, for which purposes it is processed, to whom it may be transferred, on which legal grounds it is based and what rights you have.

1. Data controller

The data controller with respect to your personal data is FABIONIS BILISIM LIMITED COMPANY.

2. Categories of personal data that may be processed

Data category	Example data	Processing purposes	Relevant legal basis
Identity and contact data	Name, surname, company name, title, phone, email, city/country information	Contacting you, preparing quotations, handling requests and applications	Contract establishment/performance, legitimate interest, explicit consent where required
Customer transaction and request data	Quotation content, form messages, product/service requests, reseller/partnership applications, after-sales support records	Evaluating requests, managing sales and after-sales operations, business development	Contract establishment/performance, legitimate interest, legal obligation
Security and technical data	IP address, logs, device/browser data, traffic and usage records	Ensuring information security, resolving technical issues, monitoring system performance	Legal obligation, legitimate interest
Cookie and preference data	Cookie records, session data, analytics and preference information	Running the website, improving user experience, analytics and campaign measurement	Legitimate interest/service delivery for strictly necessary cookies; explicit consent where required for others

3. Methods of collection

Contact, quotation and similar forms on the website
Email, phone, WhatsApp and other communication channels
Face-to-face meetings, business cards and business development meetings
Sales, after-sales support and reseller / partnership processes
Server, security, cookie and similar digital logging mechanisms

4. Processing purposes

Providing information about products and services and preparing quotations
Evaluating contact requests, demo / discovery meetings and partnership applications
Managing sales, delivery, technical support and after-sales services
Managing customer relationship and satisfaction processes
Ensuring website security and operating the technical infrastructure
Analyzing, improving and reporting business processes
Fulfilling legal and regulatory obligations
Carrying out marketing and campaign measurement activities where explicit consent has been provided

5. Transfer of personal data

Recipient group	Purpose of transfer	Transfer framework
Suppliers and technical service providers	Hosting, security, maintenance, technical support, communication and analytics infrastructure	Limited to what is necessary for the service, with contractual and technical safeguards
Financial advisors, consultants and legal counsel	Accounting, finance, audit and legal processes	Within the scope of applicable legislation and legitimate interest
Authorized public bodies and authorities	Compliance with statutory obligations and official requests	Upon lawful request of competent authorities
Business / solution partners	Execution of the requested product or service-related operation	Limited to the nature of the request and the relevant business relationship

Depending on the infrastructure and service providers used, your personal data may be transferred abroad. Where such transfers occur, the Company will implement the safeguards required by applicable legislation and will seek explicit consent where legally required.

6. Retention period

Your personal data is retained for the period prescribed by applicable legislation or for the reasonable period necessary for the purpose for which it is processed. At the end of the retention period, the data is deleted, destroyed or anonymized.

7. Your rights

To learn whether your personal data is processed
To request information if it has been processed
To learn the purpose of processing and whether it is used in line with that purpose
To know the third parties to whom the data is transferred domestically or abroad
To request correction if the data is incomplete or inaccurate
To request deletion or destruction in accordance with the law
To request notification of correction/deletion/destruction to third parties to whom the data has been transferred
To object to an adverse result arising from the analysis of processed data exclusively through automated systems
To claim compensation in case of damage due to unlawful processing

8. How to submit a request

You may submit your requests concerning your rights, together with information and documents proving your identity, by written application to the Company’s address or via info@fabionis.com in accordance with the methods permitted under the applicable KVKK legislation. Your request will be finalized as soon as possible and, in any event, within 30 days at the latest.

In case of any discrepancy between language versions, the Turkish version shall prevail.

GDPR Information Text