This clarification text pertains to the personal data processing activities carried out by Ibility Teknoloji A.Ş. in its capacity as data controller and data processor. The Customer is separately responsible for its own disclosure obligations within the scope of its own data controllership.
As Ibility Teknoloji Anonim Şirketi ("Ibility" or "Company"), we attach great importance to the protection of your personal data. We process your personal data in a transparent, fair and lawful manner within the limits stipulated in Article 10 of the Law No. 6698 on the Protection of Personal Data ("Law") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, and we take care to take the necessary administrative and technical measures in this direction.
Within the scope of this clarification text, Ibility;
i. acts as data controller with regard to personal data processed within the scope of its own commercial activities,
ii. acts as data processor with regard to personal data entered, created or managed by customers through the application.
With this clarification text, we would like to inform you about the personal data we process within the framework of your business relationship with Ibility.
Within the scope of software, applications and services provided by Ibility; the relevant customer acts as data controller and Ibility acts as data processor with regard to personal data entered, created or managed by customer institutions or persons in the system.
In this context, Ibility processes the personal data in question only for the purposes limited to providing the relevant service, operating the system, providing technical support and the purposes specified in the contract; in accordance with the instructions of the data controller and in compliance with the Law. Ibility does not use personal data for purposes other than those determined by the data controller and takes the instructions of the data controller as the basis before transferring data to third parties.
Within the framework of the above-mentioned purposes and the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698 regarding the transfer of personal data, your personal data provided to I-bility within the scope of a business relationship:
Data transfer within Turkey may be transferred without seeking explicit consent, limited to the cases pursuant to subparagraph 8/2(a) of KVKK, where it is required by law pursuant to KVKK 5/2 (a), (c) is mandatory for the establishment and/or performance of the contract, (ç) is mandatory for the fulfillment of a legal obligation, and (e) is mandatory for the establishment, exercise or protection of a right.
Your personal data is obtained by Ibility through automatic means via application and email, and non-automatic means such as filling out a written form or hand delivery within the scope of all processes, as stipulated in the laws specified in paragraph 2 of Article 5 of the Law, for the establishment and/or performance of the contract, fulfillment of the legal obligation, provided that it does not harm the fundamental rights and freedoms of the data subject.
Your personal data is processed based on national and international regulations, especially the Constitution, and pursuant to Article 5 of the Personal Data Protection Law, for the reasons that it is clearly stipulated in the laws, provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller, it is mandatory for the data controller to fulfill its legal obligation, it is necessary to process personal data belonging to the parties to the contract provided that it is directly related to the establishment or performance of a contract, and data processing is mandatory for the establishment, exercise or protection of a right.
As personal data subjects, you have the following rights under Article 11 of the Law:
You can submit your above-mentioned rights in writing to [email protected] as the data controller, or through other methods determined by the Personal Data Protection Board, in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller. These rights are granted to ensure the protection of personal data and to create remedies in case of violation of the rights of data subjects. The exercise of these rights enables data subjects to control the processing of their personal data. Ibility will finalize your request as soon as possible upon receipt of the relevant documents. Depending on the nature of your request, this period is thirty days at the latest. However, if the process requires an additional cost, the fee specified in the tariff determined by the Board may be charged.