Legal Basis: This clarification text is based on Personal
Data No. 6698.
Article 10 of the Protection Law and the Procedures and Procedures to be Followed in Fulfilling
the Disclosure Obligation
It has been prepared in accordance with the Communiqué on Principles.
1. Data Controller
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is
transferred to the data controller.
as Bedo Dijital within the scope explained below by
will be processed.
Data Controller Information:
- Trade Name: Bedo Dijital
- Email: info@bedodijital.com
2. Purposes for which Personal Data will be Processed
Your personal data may be processed for the following purposes as specified in Articles 5 and 6 of
the KVKK:
It will be processed within the terms and purposes:
| Purpose of Processing |
Explanation |
| Service Delivery |
Providing, developing and providing products and services offered within the scope of
the contractual relationship
personalization |
| Customer Relationship Management |
Increasing customer satisfaction, evaluating requests and complaints, communication
carrying out activities |
| Information Security |
Planning, auditing and execution of information security processes, preventing
unauthorized access
|
| Legal Obligations |
Legal obligations as required or required by legal regulations
instead of
bringing |
| Finance and Accounting |
Conducting financial reporting, budget and accounting transactions, auditing activities
realization |
| Human Resources |
Planning and execution of human resources processes (employee candidates and employees)
for)
|
| Marketing |
Conducting marketing analysis studies and managing advertising and campaign processes
(on
with consent) |
| Product/Service Development |
Developing and improving products and services, increasing user experience |
3. Categories of Personal Data Processed
Your personal data is processed in the following categories:
3.1. Identity Information
- Name, surname, T.R. identification number, nationality information, mother's name, father's
name, place and date of birth, gender
3.2. Contact Information
- Phone number, address, email address, fax number, IP address
3.3. Location Information
- Location data, travel and accommodation information
3.4. Customer Transaction Information
- Billing information, order information, payment information, call center records,
request/complaint
information
3.5. Transaction Security Information
- IP address, website login and logout information, password and password information, log records
3.6. Risk Management Information
- Information processed to manage commercial, technical and administrative risks
3.7. Financial Information
- Bank account number, IBAN, credit card information, income information
3.8. Marketing Information
- Cookie records, shopping history, interests, preferences and likes
3.9. Audiovisual Records
- Photographs, audio recordings, security camera recordings
3.10. Professional Experience Information
- Diploma information, certificate information, work experience (for employee candidates and
employees)
4. To whom and for what purpose the processed personal data can be transferred
Your personal data, personal data processing conditions and purposes specified in Articles 8 and 9 of
the KVKK
It can be transferred to the following persons and organizations within the framework of:
4.1. Domestic Transfers
| Person/Organization to whom Transfer can be made |
Transfer Purpose |
| Business Partners |
Providing services, executing business processes |
| Suppliers and Service Providers |
Infrastructure services, payment systems, logistics services |
| Authorized Public Institutions and Organizations |
Fulfillment of legal obligations |
| Audit Firms |
Carrying out audit activities |
| Law Firms |
Legal consultancy and execution of processes |
| Banks and Financial Institutions |
Processing payment transactions |
4.2. International Transfers
Your personal data may be transferred abroad under the following conditions in accordance with
Article 9 of the KVKK:
- Transfer to countries declared to have adequate protection by the Personal Data Protection Board
- In case there is not sufficient protection, data controllers in Turkey and the relevant foreign
country
They must undertake in writing to provide adequate protection and have the permission of the
Personal Data Protection Board.
to be found
- Existence of explicit consent of the relevant person
5. Method and Legal Reason for Collecting Personal Data
5.1. Collection Methods
Your personal data is collected by the following methods:
- Website and mobile applications
- electronic mail
- Telephone and call center
- Social media platforms
- Forms issued in physical environment
- Information from third party service providers
- camera recordings
5.2. Legal Reasons
Your personal data is processed based on the following legal reasons specified in Articles 5 and 6 of
the KVKK.
is processed:
Situations That Can Be Processed Without Explicit Consent (KVKK article 5/2):
- It is clearly provided for in the law
- Those who are unable to express their consent due to actual impossibility or whose consent does
not have legal validity
To protect the life or physical integrity of the unknown person or someone else
mandatory
to be
- Provided that it is directly related to the establishment or performance of a contract,
to their side
It is necessary to process personal data
- It is mandatory for the data controller to fulfill its legal obligation
- It has been made public by the person concerned
- Data processing is mandatory for the establishment, exercise or protection of a right
- Provided that it does not harm the fundamental rights and freedoms of the data controller, the
data controller's legitimate
interests
Data processing is mandatory for
Special Personal Data (KVKK article 6):
Special categories of personal data, other than health and sexual life, may be processed in cases
stipulated by law.
It may be processed without the express consent of the person. Personal data regarding health and
sexual life can only be
protection of public health, preventive medicine, medical diagnosis, treatment and care services,
for the purpose of planning and management of health services and financing, under the obligation of
confidentiality
It can be processed by persons or authorized institutions and organizations.
6. Rights of the Relevant Person Listed in Article 11 of the KVKK
In accordance with Article 11 of the KVKK, as a personal data owner, you have the following rights:
- Learning whether personal data is processed or not,
- Requesting information if personal data has been processed,
- Purpose of processing personal data and whether they are used for their intended purpose
learning,
- Knowing the third parties to whom personal data is transferred at home or
abroad,
- Correction of personal data if it is incomplete or incorrectly processed
don't want,
- Deletion or destruction of personal data within the framework of the conditions
stipulated in Article 7 of the KVKK
don't want to be done,
- Correction, deletion or destruction is not possible for third parties to whom personal
data is transferred.
requesting notification,
- By analyzing the processed data exclusively through automatic systems
person
Objecting to a result that is unfavorable to him/her,
- In case of damage due to personal data being processed unlawfully,
request removal.
7. Application Methods
To exercise your rights mentioned above, you can apply using the following methods:
7.1. Application Channels
- Written Application: Bedo Dijital, Türkiye / Ankara
- Secure Electronic Signature: info@bedodijital.com
- Mobile Signature: info@bedodijital.com
- Email Registered in the System: You have previously reported to our Company and
are in our system.
registered
your e-mail address
7.2. Information Required to Apply
Your application must include the following information:
- Name, surname and signature if the application is written
- For citizens of the Republic of Türkiye, T.R. identification number, nationality for foreigners,
passport
number
or identification number if available
- Residence or workplace address based on notification
- E-mail address, telephone and fax number for notification, if any
- Request subject
7.3. Evaluation of Applications
Your applications will be submitted as soon as possible and at the latest, depending on the nature of
the request. 30 (thirty) days in
It will be finalized free of charge.
If the response to the application is submitted in writing, no fee will be charged for up to 10
pages. of 10 pages
on
A transaction fee of 1 Turkish Lira may be charged for each page.
If the answer to the application is given on a recording medium such as CD or flash memory, our
Company may request
The fee charged cannot exceed the cost of the recording medium.
8. Data Security
Our company, in accordance with Article 12 of the KVKK, prevents the unlawful processing of personal
data,
to prevent unlawful access to personal data and to ensure the protection of personal data
To take all necessary technical and administrative measures to ensure the appropriate level of
security for the purpose of
is taking.
Security Measures Taken:
- Data access and authorization procedures
- Firewall and antivirus systems
- SSL/TLS encryption protocols
- Regular security audits and penetration tests
- Employee training and confidentiality agreements
- Data backup and recovery systems
- Physical security measures (camera, access control)
9. Storage Period of Personal Data
Your personal data will be processed for the period required by the purpose of processing and within
the periods stipulated in the relevant legislation.
is stored within:
| Data Category |
Storage Period |
Legal Basis |
| Customer Data |
10 years |
Tax Procedure Law, Turkish Commercial Code |
| Accounting Records |
10 years |
Tax Procedure Law |
| Job Application Records |
2 years |
Labor Law |
| Employee Personnel Files |
10 years (post-employment) |
Social Security Legislation |
| Marketing Permission Records |
Until consent is withdrawn |
KVKK |
| Security Camera Records |
30-60 days |
Personal Data Protection Authority Guide |
10. Communication
For your questions about your rights under KVKK and this Information Text:
- Email: info@bedodijital.com
Information Text Date: January 1, 2026
Last Update: February 2, 2026
Version: 2.0