Personal Data Protection and Processing Clarification Text
1. Data Controller
In accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK") and international privacy standards (GDPR), your personal data may be processed by Karum Bilişim Anonim Şirketi ("Company") as the data controller within the scope described below.
2. Categories of Personal Data Processed
Depending on your relationship with our company (website visitor, customer, demo requestor, software user), the following categories of data are processed:
- Identity Information: Name, surname, national identity number (if applicable for invoicing).
- Contact Information: Email address, phone number, company name, corporate address.
- Transaction and Security Information: IP address, browser information, log records, user authentication data.
- Customer Transaction Data: Software usage records, demo requests, contract details, payment and invoicing histories.
3. Purposes of Processing Personal Data
Your personal data is processed for the following legitimate purposes:
- Providing, activating, and maintaining our Cloud ERP, Accounting, HR, and Site Management software platforms,
- Fulfilling legal obligations under tax, commercial, and electronic commerce laws,
- Executing customer support, integration setups, and SLA commitments,
- Ensuring information security, cyber fraud prevention, and operational integrity.
4. Transfer of Personal Data
Your data is not sold or shared with unauthorized third parties. Personal data may be transferred strictly to certified e-transformation integrators (EDM, Logo, Nilvera, etc.), banking institutions for direct reconciliation, and legal authorities upon official lawful requests.
5. Rights of the Data Subject
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, request information, request correction of inaccurate data, request deletion, and object to adverse results. You may submit your requests in writing to info@karum.com.tr.