Data Protection Notice

Last updated: 18 Oct 2026

As Karatsoft Teknoloji Limited Şirketi (“Karatsoft” or the “Company”), we attach importance to the security of your personal data. This Data Protection Notice has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, in order to inform you about your personal data processed through the karatsoft.com website, the forms on the site and our communication channels.

1. Data controller

Company name: Karatsoft Teknoloji Limited Şirketi
Tax identification number: 5221392475
Head office: Karadeniz Mah. Eski Edirne Asfaltı Cad. No: 408, Venezia Mega Ofis J Blok No: 55, Gaziosmanpaşa/İstanbul
Branch office: Dijitalpark Teknokent Ataşehir Yerleşkesi, Barbaros Mah. Şebboy Sok. No: 4/1 İç Kapı No: 1, Ataşehir/İstanbul
E-mail: hukuk@karatsoft.com · Phone: 0 (212) 812 17 95

2. Personal data processed

When you visit our website and contact us, only the data necessary for the relevant operation is processed:

Data category	Data	Collected from
Identity	First name, last name	Visitors who fill in forms, job applicants, people who post comments
Contact	E-mail address, phone number, city of residence	Visitors who fill in forms, job applicants
Request and content	Message in the contact and quote forms, the page to which the request relates, blog comment	Visitors who fill in forms, people who post comments
Education and professional experience	CV and attachments, education level, school and field of study, length of experience, most recent employer and job title, technologies used, foreign languages, LinkedIn and portfolio links, work arrangement preference, salary expectation, available start date	Job applicants
Transaction security	IP address, browser and device information, date and time of access, form submission records	All visitors
Preferences (only with your consent)	Your cookie preference; if you give consent, the chat assistant visitor key	Visitors who give consent

We do not request special categories of personal data (health, religion, ethnic origin, political opinion, biometric data, etc.). We kindly ask you not to include such data in your CV and messages; if such data is shared, it will not be taken into consideration and will be destroyed.

3. Purposes of processing

To receive and assess your contact, quote, demo and initial meeting requests and to get back to you;
To carry out pre-contractual processes relating to our products and services (needs analysis, preparation of the scope and quote);
To assess job applications, contact candidates and carry out recruitment processes;
To moderate blog comments before publication and to publish approved comments under your name;
To ensure the security of the site and to prevent misuse, spam submissions and attacks;
To carry out information security processes, fulfil our legal obligations and respond to requests from competent authorities;
To establish, exercise and protect rights in the event of potential disputes;
If you give your consent, to recognise you when you return, to remember your chat history and to display external content (Google Maps).

4. Legal grounds

Your personal data is processed on the basis of the following legal grounds under Article 5 of the KVKK:

Direct relation to the conclusion or performance of a contract (Article 5(2)(c)): quote, demo and initial meeting requests; the assessment of job applications;
Fulfilment of a legal obligation (Article 5(2)(ç)): record-keeping and retention obligations under Law No. 5651 and the relevant legislation; requests from competent authorities;
Establishment, exercise or protection of a right (Article 5(2)(e));
Legitimate interest (Article 5(2)(f)): site security, prevention of misuse, responding to your requests and comment moderation, provided that this does not harm your fundamental rights and freedoms;
Explicit consent (Article 5(1)): non-essential cookies and similar technologies (the preference and external content categories) and the publication of your approved blog comment under your name. You may withdraw your explicit consent at any time.

5. Method of collection

Your personal data is collected electronically, by partly or fully automated means, through the contact, quote, job application and comment forms on our website; the information you send us by e-mail, phone or WhatsApp; the chat assistant and cookies, subject to your consent; and server and security logs.

6. Transfer of personal data

Your personal data is not sold and is not shared with third parties for advertising purposes. It may be transferred as follows:

The information you submit through the forms is recorded in netKonsol, the customer relationship platform developed and operated in-house by our Company; only our authorised employees have access to these records;
To the suppliers from whom we obtain hosting, content delivery network (CDN), e-mail and information technology services, to the extent required by the service;
To our lawyers and advisers in the event of legal disputes;
To competent public institutions and organisations and to judicial authorities, upon request.

Such transfers are made only for the purposes set out above and to the extent necessary.

Transfers abroad: Your data may be processed on servers located abroad within the scope of the infrastructure service we use for the site's content delivery and security (Cloudflare), Google Analytics, which we use for visit statistics, and, only if you use the relevant feature, the Google Maps and WhatsApp (Meta) services. These transfers are carried out in compliance with the conditions laid down in Article 9 of the KVKK (standard contract, explicit consent or the other cases provided for in the Law).

7. Retention periods

Contact and quote requests: 2 years from the date on which the request is finalised; if a contract is concluded, for the term of the contract and throughout the limitation periods under the relevant legislation;
Job applications: a maximum of 2 years from the date of application; if you are hired, for the periods prescribed by the relevant legislation;
Blog comments: for as long as the comment remains published; comments that are not approved are deleted within 6 months at the latest;
Server and security logs: for the periods prescribed by the relevant legislation (a maximum of 2 years);
Cookies: for the periods specified in the Cookie Policy.

Personal data whose retention period has expired or whose reason for processing no longer exists is erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.

8. Your rights under Article 11 of the KVKK

To learn whether your personal data is processed;
If it has been processed, to request information about it;
To learn the purpose of the processing and whether your data is used in line with that purpose;
To know the third parties to whom your data is transferred domestically or abroad;
To request rectification if your data has been processed incompletely or inaccurately;
To request erasure or destruction of your data within the framework of the conditions set out in Article 7 of the KVKK;
To request that rectification, erasure or destruction be notified to the third parties to whom your data has been transferred;
To object to an outcome to your detriment arising from the analysis of your data exclusively by automated systems;
To claim compensation for the damage if you suffer damage as a result of unlawful processing.

9. Method of application

In accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may submit your requests concerning your rights, together with information that identifies you:

By a petition bearing your wet-ink signature, delivered to our head office address in person or through a notary public;
Via registered electronic mail (KEP), secure electronic signature or mobile signature;
By e-mail to hukuk@karatsoft.com from the e-mail address you have previously notified to us and that is registered in our system.

Your application will be finalised free of charge as soon as possible, depending on the nature of the request, and within 30 days at the latest; if the process entails an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board. If your application is rejected, if you find the response insufficient or if no response is given within the time limit, you may lodge a complaint with the Personal Data Protection Board.

10. Changes

This Data Protection Notice may be updated in line with changes in legislation and in our data processing activities. The current version is always published on this page; the date of the last update is shown at the top of the page. You can review the Privacy Policy for the site's general privacy practices and the Cookie Policy for cookies.