Personal Data Protection Notice

KVKK / GDPR — Privacy Notice

Personal Data Protection Notice

This notice is prepared by Sora Yazılım as Data Controller, pursuant to Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and where applicable the EU GDPR, to inform you about how we process your personal data.

Last updated: 22 May 2026

1. Data controller

Sora Yazılım — contact: kvkk@sorayazilim.com

2. Categories of personal data

Identity: name, surname, title.
Contact: e-mail, phone, company, website.
Customer transactions: requests, quotes, invoices.
Operational security: IP address, session, browser data, cookies.
Marketing: preferences and subscription status (with consent).

3. Purposes

Performing our services and contractual obligations.
Responding to your requests and feedback.
Compliance with legal obligations.
Website security and improvement.
Marketing where consent is obtained.

4. Legal basis

Processing is based on KVKK Art. 5–6: contractual necessity, legal obligation, legitimate interest, and explicit consent where required.

5. Your rights under KVKK Art. 11 / GDPR

Right to access, rectification and erasure.
Right to object to automated decision-making.
Right to data portability (GDPR).
Right to lodge a complaint with the supervisory authority.

6. How to contact us

E-mail kvkk@sorayazilim.com. We respond within 30 days.