تسجيل الدخول جرّبوه مجانًا

Personal Data Protection Notice (KVKK)

هذا النص متاح باللغة الإنجليزية فقط. النص التركي هو النص المُلزِم.

1. Identity of the Data Controller
Data Controller: BenimPOS Bilişim Teknolojileri LİMİTED ŞİRKETİ
Address: Bahçelievler Mah. 323/1 Cad. 10/50-B/21 Gölbaşı / ANKARA, Türkiye
E-mail: [email protected]
KEP (Registered Electronic Mail) Address: [email protected]
This Personal Data Protection Notice has been prepared in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation, with respect to the processing of the personal data of employees, customer representatives, suppliers and other relevant persons.

2. Categories of Personal Data Processed
The main personal data processed by BenimPOS are as follows:
  • Identity and Contact Information (name, surname, Turkish ID Number, telephone, e-mail, etc.)
  • Personnel and Employment Information (employee files, payroll records, entry and exit times, leave records, etc.)
  • Electronic System Data (VPN access, IP logs, system access records, network security logs, software usage data)
  • Customer and Technical Support Records (customer requests, call center records, software support records, fault/resolution processes)
  • Security and Audit Records (authorization records, security logs, software access levels)
These data are processed within the scope of KVKK for the purposes of carrying out business processes and operating security and audit mechanisms.

3. Purposes of Processing Personal Data
BenimPOS processes personal data for the following purposes:
  • Management of business processes (payroll, personnel rights, fringe benefits, performance evaluation, etc.)
  • Carrying out customer and technical support processes
  • Internal audit, and ensuring system security and data integrity
  • Management of internal communication and operational processes
  • Fulfillment of legal obligations (Labor Law No. 4857, the Social Security Institution (SGK) Law, KVKK, etc.)

4. Data Security and Authorization
4.1. Data Security Measures
  • System access is secured by VPN, two-factor authentication and encryption methods.
  • Access logs are monitored regularly to prevent unauthorized access.
  • Data are stored in encrypted databases and can be accessed only by authorized personnel.
4.2. Retention Periods
  • Personnel files: 10 years after the employment relationship ends
  • Electronic log records: 6 months - 2 years
  • Customer data: Anonymized upon termination of the service

5. Transfer of Personal Data
BenimPOS may share personal data only with the following parties:
  • Authorized Public Institutions and Organizations (SGK, Revenue Administration (GİB), Ministry of Labor, courts, etc.)
  • Business Partners and Service Providers (IT support companies, cloud data services, etc.)
  • Organizations Authorized for Audit and Legal Proceedings
  • Transfers of data abroad are carried out, in accordance with Article 9 of KVKK, only with explicit consent or with the permission of the Personal Data Protection Board.

6. Measures Taken to Protect Personal Data
Pursuant to Article 12 of KVKK, BenimPOS takes the following technical and administrative measures to prevent unlawful access to data:
  • Technical Measures: Encryption (AES, TLS), firewalls, intrusion detection/prevention systems (IDS/IPS), cybersecurity scans
  • Administrative Measures: KVKK policies, KVKK training for employees, security protocols supported by disciplinary regulations
  • Authorization and Access Controls: Regulation of data access levels, personal data masking and anonymization methods

7. Rights of the Data Subject
Pursuant to Article 11 of KVKK, every individual whose personal data is processed has the following rights:
  • To learn whether their personal data is being processed
  • If it has been processed, to request information about such processing
  • To learn the purpose of the processing and whether the data is used appropriately
  • To know the third parties to whom the data has been transferred
  • To request the correction of incomplete or inaccurately processed data
  • To request the deletion of the data if the conditions for processing no longer exist
Applications may be submitted to BenimPOS using the KVKK Application Form.

8. Entry into Force and Updates
This Personal Data Protection Notice was updated and entered into force as of March 1, 2025 (01.03.2025) and will be announced on BenimPOS’s official website. Updates will be made in line with changes in the law.
Contact:
Trade Name: BenimPOS Bilişim Teknolojileri LTD. ŞTİ.
Address: Bahçelievler Mah. 323/1 Cad. 10/50-B/21 Gölbaşı / ANKARA, Türkiye
E-mail: [email protected]

This English version is a translation provided for convenience. In case of any discrepancy, the Turkish version prevails.