Personal Data Protection Disclosure Notice

1. Data Controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by VodiSoft ("VodiSoft", "we") acting as data controller, within the scope described below.

Information	Detail
Brand	VodiSoft
Email	[email protected]
Web	https://vodisoft.com

For any additional information about the data controller, please contact us at [email protected].

2. Purpose and Scope of This Notice

This Notice has been prepared under Article 10 of the KVKK to inform our site visitors, customers, business partners, suppliers, job candidates and other third parties about the purposes for which their personal data is processed, to whom and for what purpose it may be transferred, the legal grounds for processing, and their rights under the KVKK.

Data processing relating to the end users of our mobile applications and games is governed separately by our Privacy Policy. The two documents complement one another.

3. Categories of Personal Data Processed

Depending on the nature of the data subject, the following categories may be processed in the course of our activities:

Category	Example Data
Identity data	Name, surname, title
Contact data	Email address, phone number, address, company details
Customer transaction data	Proposals, orders, contracts, invoices and payment records
Transaction security data	IP address, cookie data, log records, sign-in/sign-out details
Marketing data	Newsletter subscription preferences, campaign and interaction history
Professional experience data	(For job candidates) CV, references, education and employment history
Audio and visual records	(If any) records of online meetings
Request/complaint data	Contact form, support request and complaint content

VodiSoft does not intend to process special categories of personal data (health, race, religion, political opinion, etc.). Please do not send us data of this nature.

4. How Personal Data Is Collected

Your personal data is collected by automated or partly automated means, or by non-automated means as part of a data filing system, through:

The contact form, proposal form and account creation screens on the Site,
Email, telephone and other correspondence channels,
Documents relating to Project Agreements and business processes,
Cookies and similar technologies on the Site,
Job application platforms and CV submissions,
In-person or online meetings.

5. Purposes of Processing

Providing, maintaining and improving the Site and the Services
Preparing proposals, conducting contract processes and managing projects
Invoicing and conducting financial and accounting processes
Managing customer relationships and responding to support requests
Ensuring site security, log records and prevention of unauthorised access
Marketing and informational communication, on request and where consent has been given
Fulfilling legal obligations and conducting legal proceedings
Evaluating job applications and conducting recruitment processes
Statistical analysis, reporting and improving service quality

6. Legal Grounds for Processing

Your personal data is processed on one or more of the following grounds set out in Articles 5 and 6 of the KVKK:

Directly related to the conclusion or performance of a contract
Necessary for us to fulfil a legal obligation
Made public by the data subject themselves
Necessary for the establishment, exercise or protection of a right
Necessary for the legitimate interests of the data controller, provided this does not harm the fundamental rights and freedoms of the data subject
Your explicit consent (for marketing communication, cookie preferences, international transfers and other cases requiring explicit consent)

7. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to the purposes of processing and in accordance with Articles 8 and 9 of the KVKK:

Suppliers and service providers: hosting and cloud infrastructure providers, email and marketing automation tools, third parties providing accounting and financial advisory services
Business partners: subcontractors and technology partners engaged on a project
Competent public authorities: judicial and administrative authorities, upon lawful request within the scope of legal obligations
Advisors: professionals providing legal, accounting and audit services

Where your data is processed through cloud services hosted on servers located outside Türkiye (e.g. hosting, email infrastructure), such transfer is carried out under Article 9 of the KVKK, either with your explicit consent or under the other appropriate safeguards provided by law. Further information about the non-Turkish service providers used is available on request.

8. Retention Periods

Your personal data is retained only for as long as the purpose of processing requires, taking into account the statutory limitation periods set out in applicable legislation (Tax Procedure Law, Turkish Commercial Code, Code of Obligations, etc.).

Data	Retention
Proposal and contact correspondence	2 years after the request is resolved
Contract and project records	For the statutory limitation period after the agreement ends
Financial and accounting records	For the period required by applicable legislation
Log and transaction security records	Up to 2 years
Job candidate CVs	1 year from receipt of the application

Once the retention period ends, your personal data is deleted, destroyed or anonymised.

9. Cookies

Cookies are used on the Site to improve the user experience, ensure site security and analyse site traffic. Consent is obtained through the browser for non-essential cookies.

You may delete or block cookies at any time through your browser settings. Blocking essential cookies may cause some functions of the Site to stop working.

10. Your Rights Under the KVKK

Under Article 11 of the KVKK, you may exercise the following rights by contacting us:

Learn whether your personal data is being processed,
Request information if it has been processed,
Learn the purpose of processing and whether the data is used accordingly,
Know the third parties to whom data is transferred, domestically or abroad,
Request rectification if the data is incomplete or inaccurate,
Request erasure or destruction under the conditions of Article 7 of the KVKK,
Request that rectification, erasure and destruction be notified to third parties to whom the data was transferred,
Object to a result adverse to you produced solely by automated analysis of the processed data,
Claim compensation for damage suffered due to unlawful processing.

11. How to Apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests:

From the email address registered in our systems to [email protected],
By secure electronic signature or mobile signature to [email protected].

Your application must clearly state your name, contact details and the subject of your request.

Depending on the nature of the request, your application is concluded free of charge within 30 (thirty) days at the latest; if the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

If your application is rejected, the response is found insufficient, or no response is given within the period, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the response and in any event within 60 days of the application date.

12. Changes

VodiSoft reserves the right to update this Notice in line with applicable legislation and changes in its business processes. The current version is always published on the Site and the effective date above is updated accordingly.

13. Contact

VodiSoft
Email: [email protected]
Web: https://vodisoft.com

This document is published in Turkish and English. In the event of a conflict between the texts, the Turkish text prevails.