INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY
CORPORATE CUSTOMER PRIVACY NOTICE
This Privacy Notice has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (the “KVKK” or the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Disclosure Obligation.
As INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY (the “Data Controller” or “InfinityQ”), we attach importance to the protection and processing of your personal data and to ensuring its security. In this context, we show sensitivity in processing and retaining all kinds of collected personal data in accordance with the KVKK and its secondary regulations.
Being aware that, as set out in the KVKK, we are responsible in the capacity of “Data Controller” for the personal data processed by the Data Controller or upon the Data Controller’s instruction, your personal data is processed as explained below and within the limitations permitted by the legislation.
1. Data Controller
Pursuant to Law No. 6698, your personal data may be processed by INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY as the “Data Controller” within the scope explained below.
2. Collection and Processing of Personal Data and Processing Purposes
| Data Processing Activity | Data Subject | Data Category | Processing Purpose | Collection Method | Legal Basis |
|---|---|---|---|---|---|
| Being contacted via the website regarding our products and carrying out service/product supply processes for corporate customers | Corporate Customer Representative/Employee/Agent | Identity (Name and Surname, Title); Contact (Company Worked For, Email Address, Phone Number) | Carrying out activities in compliance with the legislation; Carrying out company/product/service loyalty processes; Carrying out communication activities; Carrying out/auditing business activities; Carrying out goods/service sales processes; Carrying out customer relationship management processes | Directly from the data subject, electronically | KVKK Art. 5/2-(c) — Processing of personal data belonging to the parties of a contract being necessary, provided that it is directly related to the establishment or performance of the contract. |
| Carrying out the purchasing transactions of corporate customers | Corporate Customer Representative/Employee/Agent | Identity (Name and Surname); Contact (Company Worked For, Email Address, Phone Number); Customer Transaction (Payment Information) | Carrying out activities in compliance with the legislation; Carrying out company/product/service loyalty processes; Carrying out communication activities; Carrying out/auditing business activities; Carrying out goods/service sales processes; Carrying out customer relationship management processes | Directly from the data subject, electronically | KVKK Art. 5/2-(c) — Being necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract. |
| Keeping log records for the effective operation of the website and the service and for transaction and information security | Corporate Customer Representative/Employee/Agent | System Information (Login-Logout Logs, Crash Records, Time Stamps) | Carrying out information security processes; Carrying out/auditing business activities; Ensuring the security of Data Controller operations; Carrying out goods/service production and operation processes; Carrying out activities in compliance with the legislation; Carrying out storage and archiving activities | Directly from the data subject, electronically | KVKK Art. 5/2-(a) — Being expressly provided for in the laws. KVKK Art. 5/2-(f) — Processing of data being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Responding to complaints, suggestions, requests and questions | Corporate Customer Representative/Employee/Agent | Comment and Complaint Information | Carrying out company/product/service loyalty processes; Receiving and evaluating suggestions to improve business processes; Carrying out after-sales support services for goods/services; Carrying out customer relationship management processes; Carrying out activities for customer satisfaction; Tracking requests/complaints | Directly from the data subject, electronically | KVKK Art. 5/2-(c) — Being necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract. KVKK Art. 5/2-(f) — Processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Carrying out legal proceedings and dispute processes | Corporate Customer Representative/Employee/Agent | Identity (Name and Surname); Contact (Email Address, Phone Number); Legal Proceeding (Enforcement Information, Litigation Information) | Carrying out audit/ethics activities; Carrying out activities in compliance with the legislation; Following up and carrying out legal affairs; Carrying out internal audit/investigation/intelligence activities; Providing information to authorized persons, institutions and organizations | Directly from the data subject, electronically | KVKK Art. 5/2-(e) — Processing being necessary for the establishment, exercise or protection of a right. |
| Carrying out marketing-oriented targeting activities, including sending commercial electronic messages | Corporate Customer Representative/Employee/Agent | Contact (Phone Number, Email Address) | Carrying out company/product/service loyalty processes; Carrying out communication activities; Carrying out customer relationship management processes; Carrying out activities for customer satisfaction; Carrying out advertising/campaign/promotion processes | Directly from the data subject, electronically | KVKK Art. 5/1 — Explicit consent. (Where the recipient of the message is a merchant or tradesperson, such messages may be sent within the scope of the Data Controller’s legitimate interest — KVKK Art. 5/2-(f).) |
Your personal data is processed in compliance with the principles of lawfulness and good faith; in an accurate and, where necessary, up-to-date manner; for specified, explicit and legitimate purposes; in connection with and limited to those purposes; and is retained for the periods stipulated in the relevant legislation or for the period necessary for the processing purpose.
3. Transfer of Personal Data to Third Parties and Transfer Purposes
In order to fulfil the purposes set out in Article 2 above, your collected personal data may be transferred — within the scope of our legitimate interests — to our domestic business partners and to the suppliers from whom we receive services; and — within the scope of being expressly provided for in the laws and the fulfilment of our legal obligations — to public institutions legally authorized and to legally authorized private persons, in accordance with the data processing conditions set out in Article 5 of the Law and the rules on the transfer of personal data set out in Article 8 of the Law.
4. Your Rights as a Data Subject
As a data subject, if you submit your requests under Article 11 of the KVKK regarding your personal data processed by us, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller and via the methods stated below, the Data Controller will conclude your request as quickly as possible and within thirty days at the latest, free of charge, depending on the nature of the request. However, a fee may be charged if stipulated by the Personal Data Protection Board.
Pursuant to Article 13(1) of the KVKK, in order to exercise the rights stated above, you may submit your request to InfinityQ by filling in the “Data Subject Application Form” that you can access via the InfinityQ website.