1. Data Controller
Data Controller: Disti Bilişim Ltd. Şti. (“Disti Information Technologies”)
Address: Tepe Prime Business Center, Mustafa Kemal Mahallesi, Dumlupınar Bulvarı No:266A, Suite 18, 06510 Çankaya/Ankara, Türkiye
Telephone: +90 312 911 81 28
Email: info@disti.com.tr
This disclosure statement has been prepared under Türkiye’s Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation to explain how personal data is processed, retained, and transferred.
2. Data Subjects
This statement covers employees, job applicants, interns, visitors, shareholders and partners, suppliers, customers and service recipients, prospective customers, and individuals who contact us through the website.
3. Categories of Personal Data
Depending on the relationship, we may process identity and contact details; company, role, and billing details; request, transaction, and contract information; responses shared with customer representatives; and access and security records.
For demo, PoC, and expert-consultation requests, we record first and last name, business email, company, optional telephone and role, solution of interest, message, source page, browser information, the version of the privacy notice, and the time the notice was read and accepted. To limit abuse, the application stores a one-way keyed hash rather than the IP address itself.
Please do not submit special categories of personal data through website forms. These include health, biometric, genetic, and other sensitive categories defined by applicable law.
4. Purposes of Processing
- Assessing and responding to requested products, services, demos, PoCs, or expert consultations;
- conducting pre-contractual and contractual processes and maintaining service continuity;
- managing customer, supplier, and business-partner relationships;
- operating information-security, error-prevention, abuse, and fraud controls;
- meeting legal obligations and protecting rights in disputes; and
- sending product, service, release, event, and content communications where separate optional communications consent has been given.
5. Collection Methods and Legal Grounds
Personal data may be collected wholly or partly by automated means, or through physical documents, when you communicate with us, use web forms, establish a contract or service relationship, communicate by call center or email, attend events or training, or interact through solution partners or competent authorities.
Depending on the circumstances, processing may rely on legal grounds under Article 5 of the KVKK and other applicable provisions, including explicit provision by law, compliance with a legal obligation, establishment or performance of a contract, establishment, exercise, or protection of a right, and the legitimate interests of the data controller provided that fundamental rights are not harmed. Where explicit consent is required, it is requested separately and freely.
Submitting a demo or PoC request is not conditional on marketing consent. The communications-consent checkbox is optional and consent may later be withdrawn.
6. Transfer of Personal Data
Limited to the purposes described above and subject to appropriate confidentiality and security safeguards, personal data may be transferred to authorized employees; hosting, email, security, and business-process service providers; solution partners; and legally competent public authorities. If a service requires an international transfer, the current transfer conditions and appropriate safeguards required under the KVKK must be applied.
7. Retention and Security
Personal data is retained for the processing purpose and applicable statutory retention periods. When the purpose ends and no other legal ground remains, data is deleted, destroyed, or anonymized. Appropriate technical and organizational safeguards, including access control, logging, and encryption where applicable, are used against unauthorized access, loss, and misuse.
8. Your Rights under the KVKK
Under Article 11 of the KVKK, you may request to learn whether your personal data is processed; obtain information if it has been processed; learn the purpose of processing and whether data is used accordingly; know third parties to whom data is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where statutory conditions apply; request notification of correction, deletion, or destruction to recipients; object to an adverse result arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
9. Applications
You may submit an application containing sufficient information to verify your identity and request to Disti Bilişim Ltd. Şti. at the postal address above or to info@disti.com.tr. Applications are assessed using the methods and within the periods prescribed by applicable legislation.