KVKK information notice

1.Data controller

The data controller is Akollo (“Akollo”).

When an organisation uses the Akollo product, that organisation is the data controller for its employees' data and Akollo processes it on the organisation's instructions. For that processing, please read your employer's or the organisation's own information notice.

2.Personal data we process

Depending on how you interact with us, we process the following categories:

• Identity: your first and last name.
• Contact: your work email address.
• Professional: the company you work for and its team size.
• Request details: the message you write in a contact or demo form.
• Transaction security: IP address, browser information, requested pages and timestamps in server logs.
• Preference: the language you last chose on the website.

3.Purposes of processing

We process this data to:

• answer your questions, arrange a demo and prepare an offer you asked for;
• manage our communication with potential customers;
• keep the website secure, find and fix faults and prevent misuse;
• show the website in the language you prefer;
• meet our legal obligations and respond to requests from authorised public bodies.

4.Method of collection and legal basis

We collect data electronically: through the forms you fill in on akollo.com, through the emails you send us, and automatically through server logs and the language cookie when you visit the website.

Contact and request data are processed because it is necessary for steps taken before a possible contract, at your request (KVKK Article 5(2)(c)).

Transaction security data and the language preference are processed on the basis of our legitimate interest in running a secure and usable website, provided it does not harm your fundamental rights and freedoms (KVKK Article 5(2)(f)).

Where a law requires us to keep or disclose data, we rely on that legal obligation (KVKK Article 5(2)(ç)).

We do not ask for special categories of personal data on this website.

5.Who receives the data

Within the purposes above, we may transfer personal data to service providers that host the website and operate our email and request-handling systems on our behalf, and to authorised public institutions and organisations when the law requires it.

If a service provider processes data outside Turkey, the transfer is made only under the conditions in KVKK Article 9.

We do not sell personal data, and we do not share it for advertising.

6.How long we keep it

We keep data only for as long as the purpose requires or a law sets, and then delete, destroy or anonymise it. Server logs are kept for a short, fixed period for security purposes.

7.Your rights under KVKK Article 11

You have the right to:

• learn whether your personal data is processed;
• request information about it if it has been processed;
• learn the purpose of processing and whether it is used for that purpose;
• know the third parties, in Turkey or abroad, to whom it is transferred;
• ask for incomplete or inaccurate data to be corrected;
• ask for it to be deleted or destroyed under the conditions in KVKK Article 7;
• ask that third parties who received it are told about a correction, deletion or destruction;
• object to a result against you that arises solely from automated analysis;
• claim compensation if you suffer damage because of unlawful processing.

8.How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in writing to the postal address on our imprint page, or by registered electronic mail (KEP), secure electronic signature, mobile signature, or from the email address you have previously given us and that is registered in our systems, to [email protected].

Please include your name, surname and signature (for written applications), your Turkish ID number or, for foreign nationals, nationality and passport or ID number, your address or email for notifications, and a clear description of your request.

We answer free of charge as soon as possible and within 30 days at the latest. If the answer requires an additional cost, the fee set by the Personal Data Protection Board may be charged.