Privacy Notice
As data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), this notice explains how we process your personal data, for what purposes, and what rights you have.
Effective date: 24 August 2026
1. Data Controller
Your personal data is processed by Datum Yazılım Teknolojileri Anonim Şirketi ("Datum Yazılım", "the Company" or "we") acting as data controller, within the framework described below.
| Legal name | Datum Yazılım Teknolojileri Anonim Şirketi |
|---|---|
| Registered address | Beştepe Mah. Dumlupınar Blv. No: 10B, Yenimahalle / Ankara, Türkiye |
| Tax office / number | Maltepe / 2712108972 |
| MERSIS number | 0271210897200001 |
| Trade registry | Ankara Chamber of Commerce (ATO) — 549267 |
| kvkk@datumyazilim.com |
2. Data We Process
Depending on our relationship with you, we may process the following categories of data:
2.1. Website visitors
- Identity and contact data: if you complete the contact form — name, email address, phone number and the organisation you work for.
- Transaction security data: IP address, browser and device information, visit timestamps and other server log records.
- Enquiry data: the content of the message you send us through the form.
2.2. Job applicants
- Identity and contact data: name, email address, phone number.
- Professional experience data: CV, education and work history, portfolio/GitHub/LinkedIn links.
- Assessment data: interview notes and evaluation outcomes.
2.3. Product and service users
- Account data: name, email address and account preferences.
- Location data: in location-based products such as HemenPark, your location is processed only on the basis of your explicit consent and only to the extent necessary to deliver the service.
- Usage data: in-app activity records, notification preferences, error and performance logs.
3. Purposes of Processing
We process your personal data in order to:
- respond to your enquiries and answer your questions;
- deliver, develop and improve our products and services;
- manage contractual processes and commercial relationships;
- evaluate job applications and run recruitment processes;
- ensure information security and prevent misuse and fraud;
- carry out invoicing, accounting and financial operations;
- meet our legal obligations and pursue or defend legal claims;
- where you have given explicit consent, carry out promotional and marketing activities.
4. Legal Bases
Your personal data is processed on the legal bases set out in Article 5 of the KVKK:
| Legal basis | Where it applies |
|---|---|
| Directly related to the conclusion or performance of a contract (Art. 5/2-c) | Delivering our products and services, creating accounts, performing enterprise contracts |
| Compliance with a legal obligation (Art. 5/2-ç) | Record-keeping and retention duties under tax, commercial and e-commerce legislation |
| Establishment, exercise or protection of a right (Art. 5/2-e) | Retaining evidence and pursuing legal claims in the event of a dispute |
| Legitimate interests (Art. 5/2-f) | Information security, system logging, product improvement and managing the candidate pool |
| Explicit consent (Art. 5/1) | Processing location data, sending commercial electronic messages and non-essential cookies |
5. How We Collect Data
We collect your personal data through forms on our website, email correspondence, our mobile and web applications, cookies and similar technologies, and server logs — by wholly or partly automated means. In projects run with enterprise clients, data may also be provided by the client under the relevant contract.
6. Data Transfers
In accordance with Articles 8 and 9 of the KVKK, and only to the extent necessary, your personal data may be shared with:
- Cloud and infrastructure providers: hosting, database and backup services (for example Amazon Web Services, Google Cloud).
- App distribution platforms: the Apple App Store and Google Play, for distributing our mobile applications.
- Mapping and location service providers: to display maps and provide routing.
- Professional advisers: accountants, independent auditors and legal counsel.
- Competent public authorities: in response to requests for information or documents required by law.
Given the nature of the cloud services we use, your personal data may be transferred abroad. Such transfers are carried out under Article 9 of the KVKK where an adequacy decision exists, where appropriate safeguards are in place (standard contractual clauses, binding corporate rules and similar), or where a statutory exception applies. We do not sell your data to third parties for purposes outside this notice.
7. Retention Periods
We retain your personal data for as long as the purpose of processing requires, without prejudice to the limitation periods set out in applicable legislation.
| Data category | Retention period |
|---|---|
| Contact form records | 2 years from resolution of the enquiry |
| Job applications and candidate pool | 2 years from the application date |
| User account data | 6 months after account deletion |
| Commercial books and accounting records | 10 years, as required by law |
| Server and transaction security logs | The minimum period required by applicable law |
Once these periods expire, your personal data is deleted, destroyed or anonymised.
8. Data Security
We take appropriate technical and organisational measures to prevent unlawful processing of, and unlawful access to, your personal data. These include encryption in transit (TLS), role-based access control, regular backups, logging, confidentiality undertakings within the team and supplier due diligence.
9. Processing in Our Products
In HemenPark and in HemenPark EV360 Vision, which is currently in development, data processing is limited to the minimum required to deliver the service:
- Location data is processed only with your explicit consent, to show you nearby parking; you can withdraw the permission at any time in the app settings.
- Parking occupancy data is, as a rule, aggregate data that is not linked to an individual.
- In camera-based occupancy detection, the purpose is to determine whether a space is free or occupied; no person or licence-plate recognition is carried out.
- Analytics dashboards provided to enterprise clients share aggregate occupancy statistics rather than personal data.
10. Cookies
Our website uses cookies and similar technologies. Which cookies we use, why we use them and how you can manage your preferences are explained in detail in our Cookie Policy.
11. Your Rights
Under Article 11 of the KVKK you have the right to:
- learn whether your personal data is being processed;
- request information if it has been processed;
- learn the purpose of processing and whether the data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom the data has been transferred;
- request rectification if the data is incomplete or inaccurate;
- request erasure or destruction under the conditions in Article 7 of the KVKK;
- request that rectification, erasure and destruction be notified to third parties to whom the data was transferred;
- object to an adverse outcome arising from analysis carried out solely by automated systems;
- claim compensation if you suffer loss due to unlawful processing.
12. How to Make a Request
You may submit requests concerning the rights above, in line with the Turkish Communiqué on the Principles and Procedures for Applications to the Data Controller, by:
- Post: a signed written request to Beştepe Mah. Dumlupınar Blv. No: 10B, Yenimahalle / Ankara, Türkiye, enclosing documentation confirming your identity;
- Email: from the address registered in our systems to kvkk@datumyazilim.com;
- Secure electronic signature: as a document signed with a qualified electronic signature.
We respond as quickly as possible and in any case within thirty days, free of charge. Where the request requires additional cost, we may charge the fee set by the Turkish Personal Data Protection Board.
13. Changes
We may revise this notice in line with legislative changes and updates to our processes. The current version is always published on this page, and we give separate notice of material changes.
For questions, contact us at kvkk@datumyazilim.com.