- Company
-
Products
Products
New ProductCloud Server
Fully managed virtual server infrastructure. Setup in minutes, hourly billing and 24/7 expert support so you can focus on your business.
Try Now -
Solutions
Backup & Security
Data SecurityRansomware & encryptionCloud BackupSecure backup to data centersImage BackupFull disk image + fast recoveryOff-Site BackupOff-site disaster recoveryMobile BackupiOS & Android photos/contactsRansomware ProtectionAgainst ransomware attacksTwo-Factor Auth2FA account security - Plans
- Resources
- Partners
- Blog
KVKK Data Processing Policy
Scope of the Law and Our Company's Rights and Obligations Arising from the Law
General Principles Regarding the Processing of Personal Data
Purposes of Personal Data Processing and Sharing within the Scope of the Law
Purposes Regarding the Processing of Personal Data
Purposes Regarding the Sharing of Personal Data
Section 1. Purpose and Enforcement of the Policy
Law No. 6698 on the Protection of Personal Data (“Law”) entered into force on April 7, 2016. In accordance with this Law on the Protection of Personal Data, Nar Bulut Bilgi Teknolojileri San. ve Tic. A.Ş. holds the title of “Data Controller”.
In this context, this “Personal Data Processing and Protection Policy” has been prepared with the aim of informing individuals whose personal data is processed by our Company (“Data Subjects”).
Section 2. Scope of the Policy
This policy applies to all personal data processing activities carried out wholly or partially by automated means or by non-automated means provided that they are part of a data recording system, regarding real persons whose personal data is processed. Pursuant to Article 28 of the Law on the Protection of Personal Data No. 6698, this Policy does not apply to the processing of personal data by natural persons relating to themselves or their family members living in the same residence, provided that it is not disclosed to third parties and that data security obligations are complied with; to the processing of personal data for purposes such as research, planning, statistics and the like by anonymizing personal data for official statistics; to the processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that national defense, national security, public safety, public order, economic security, right to privacy or personal rights are not violated or that no crime is committed; to the processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security; and to the processing of personal data by judicial authorities or enforcement authorities in connection with investigation, prosecution, trial or execution proceedings.
Processing of Personal Data by Our Company
Categorization of Personal Data Processed by Our Company
Within the scope of the activities of our Company, categories of personal data regarding the following data subject groups are processed:
Identity information
Contact information
Customer transaction information
Financial information
Physical space security information
Transaction security information
Legal transaction information
Customer complaint and request management information
Purposes of Processing Personal Data by Our Company
Personal data is processed by our Company within the framework of the following purposes:
Execution of human resources processes
Performance of activities in accordance with legislation
Execution of finance and accounting processes
Ensuring physical space security
Follow-up of legal affairs
Execution of goods/service procurement processes
Execution of goods/service sales processes
Execution of business continuity activities
Execution of logistics activities
Management of communication activities
Transfer of Personal Data by Our Company and Parties to Whom Data Transfer is Made
Our Company may transfer personal data to third parties in Turkey and abroad for the purposes stated above, in compliance with the conditions and purposes of personal data processing set forth in Articles 8 and 9 of the Law.
Rights of Data Subjects Arising from the Law
Rights of Data Subjects
Pursuant to Article 11 of the Law, everyone has the right to apply to the data controller and;
Learn whether personal data is being processed,
Request information if personal data has been processed,
Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Know the third parties to whom personal data is transferred domestically or abroad,
Request correction of personal data if it is incomplete or inaccurately processed,
Request deletion or destruction of personal data within the framework of Article 7,
Request notification of transactions carried out to third parties to whom personal data has been transferred,
Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
Demand compensation for damages in case of loss due to unlawful processing of personal data.
Exercise of Rights
Section 1. Purpose and Enforcement of the Policy
Law No. 6698 on the Protection of Personal Data (“Law”) entered into force on April 7, 2016. In accordance with this Law, Nar Bulut Bilgi Teknolojileri Sanayi ve Ticaret Anonim Şirketi, acting as the Data Controller, presents the following policy regarding the processing and protection of personal data.
Applications regarding the exercise of rights must be submitted to us in writing or by other methods determined by the Personal Data Protection Board (“Board”). In this context, applications may be delivered in person to our Company address, sent via registered mail, or submitted through the “Personal Data Protection Law Information Request” form.
