Transparency · Data protection · Your rights

Clear information
about your data.

Learn what personal data may be processed, why it may be used, and how to exercise your rights. This notice concerns the Intranet TR marketing website—not the internal data processed by customers using the product.

Turkish Law No. 6698 (KVKK) Website scope 27 October 2026 · Draft
OUR PRIVACY APPROACH

Transparency starts with clear information.

This document describes possible data processing on the Intranet TR marketing website, with reference to Türkiye's Personal Data Protection Law No. 6698. It is a draft until the actual data controller, contact details, infrastructure, recipients and retention practices are verified.

Data controller and contact

Intranet TR is a product and brand name. The data controller is the natural or legal person who determines the purposes and means of processing personal data.

Data controller (legal entity) [TO BE COMPLETED BEFORE PUBLICATION]
Registered address [TO BE COMPLETED BEFORE PUBLICATION]
KVKK contact email / registered electronic mail (KEP) [TO BE COMPLETED BEFORE PUBLICATION]
Publication requirement These fields must identify the actual data controller, not just the brand. This draft must not be presented as a final statutory notice before verification.

Scope and categories of personal data

Depending on the features enabled, the following information may be involved when you browse this website or contact us. This does not mean that all categories are currently collected.

Contact information

Name, business email address, telephone number and company details.

Inquiry details

Questions about the product, demo requests and any information you choose to include.

Technical access records

Depending on hosting configuration: IP address, access timestamps, requests and error logs.

Preferences

Cookie preferences, only if such features are introduced.

Current static website Demo and contact forms are previews: they do not transmit submissions to a backend. Hosting and IIS access or security logs should be assessed separately.

Purposes and legal grounds

Personal data may be processed only for specific, explicit and legitimate purposes and where a legal condition under Article 5 of Law No. 6698 applies. The following is an indicative mapping that must be confirmed against actual operations.

Purpose Potential legal basis (subject to assessment)
Responding to product inquiries and arranging meetings Article 5(2)(c), where directly necessary for establishing or performing a contract; or Article 5(2)(f), legitimate interests, provided fundamental rights and freedoms are not harmed.
Protecting systems, preventing abuse and reviewing technical logs Article 5(2)(f), legitimate interests; or Article 5(2)(ç) where a specific legal obligation applies.
Responding to legally valid requests Article 5(2)(ç), legal obligation; or Article 5(2)(e), establishment, exercise or protection of a right.
Optional marketing communications Any separate approval required by electronic communications legislation and a valid KVKK processing condition, including explicit consent where applicable.

Where explicit consent is required, it must be requested separately from this notice. Reading a privacy notice does not constitute consent.

How data may be collected

Where enabled, information may be collected electronically through website forms, messages you send, direct communications and web server technical logs. Relevant notices should be presented at the point of collection.

Data sharing and international transfers

Depending on actual service arrangements and legal requirements, recipients may include hosting or technical infrastructure providers, authorized service suppliers and competent public authorities. The recipient groups, purposes and service locations must be verified before final publication.

International transfers

If personal data is transferred outside Türkiye, the conditions and safeguards under Article 9 of Law No. 6698 must be assessed. This draft does not claim that international transfers do or do not take place.

Retention and data security

Personal data should be retained only for the period necessary for its purpose or required by applicable law, then deleted, destroyed or anonymized as appropriate. Actual retention periods for inquiries, correspondence and technical logs must be documented by the data controller.

Access restrictions, secure communications and appropriate organizational and technical safeguards should be implemented based on assessed risks. This draft makes no unverified security certification or absolute security guarantee.

Your rights under KVKK

Subject to applicable conditions, Article 11 of Law No. 6698 gives data subjects the right to:

  • Learn whether their personal data is processed and request information if it is.
  • Learn the purpose of processing and whether data is used accordingly.
  • Know the third parties to whom personal data is transferred in Türkiye or abroad.
  • Request correction of incomplete or inaccurate data.
  • Request deletion or destruction where legal conditions are met, and notification to relevant recipients.
  • Object to adverse results arising exclusively from automated analysis.
  • Seek compensation for damage caused by unlawful processing.

Requests and response process

You may submit a request to the actual data controller in writing or through other methods permitted by applicable Turkish legislation. Requests should contain sufficient information to verify identity and evaluate the request.

01 · Submit your request

Use the controller's verified application address or another legally accepted channel.

02 · Receive a response

Requests are answered as soon as possible and within 30 days at the latest. A fee may apply where permitted by the relevant tariff.

If your request is rejected, the response is insufficient or no response is provided in time, you may lodge a complaint with the Turkish Personal Data Protection Board within the conditions and deadlines of Article 14.

Cookies and similar technologies

Cookies may support essential website functions, user preferences or analytics. Non-essential cookies requiring consent should not be activated before appropriate information and a valid choice mechanism are provided.

The current static site does not intentionally include third-party advertising or analytics cookies. The behavior of IIS, reverse proxies, hosting services or future integrations must still be checked in the actual deployment.

Language preference If you explicitly select a language, this site stores that preference in your browser's local storage. No server-side language profile is created by this feature. You can clear the preference in your browser's site data settings.

Intranet TR product and customer data

This notice covers the Intranet TR marketing website . Personal data processed by customer organizations through their own intranet installations (such as employee, leave, expense and document data) requires a separate assessment of contractual responsibilities, architecture and data-controller / data-processor roles.

A customer's employee privacy notice cannot be replaced by this marketing website notice.

Updates to this notice

The notice should be updated when the website's actual processing activities or legal requirements change. The current text is a draft dated 27 October 2026 and requires verification before publication as a final statutory notice.