Privacy and data protection notice

Data controller

The data controller for personal data processed on this site and in messages you send us is Nesilsoft Yazılım Sanayi ve Ticaret A.Ş. ("Nesilsoft").

• Company: Nesilsoft Yazılım Sanayi ve Ticaret A.Ş.
• Address: Ataköy 7-8-9-10. Kısım Mah. Çobançeşme E-5 Yan Yol Cad. No: 22/1 (Nef Ataköy 22), Bakırköy / İstanbul, Türkiye
• E-mail: info@nesilsoft.com.tr

What data we process and why

The site has no user accounts, no sign-up and no database. Your personal data is processed only in the three situations below, and only for the purposes stated here. It is not sold, it is not added to marketing lists, and no visitor profiles are built.

• When you visit the site: your IP address, browser and device information (user-agent), the page you open and the time of the visit. As on any web server, this technical data is written to the server logs of our hosting provider so the site can run securely.
• When you write to us by e-mail or WhatsApp: your full name, your e-mail address or phone number, your company name if you give it, the topic you chose and the content of your message. We use this to reply to you. If the conversation leads there, we also use it to discuss a project, partnership or investment with you.
• When you apply to us to use your rights under the KVKK: the full name, Turkish ID number (for foreign nationals: nationality and passport number, or ID number if you have one), address, e-mail, phone number, signature and request you give in your application. We use these to verify your identity, conclude your application and be able to show that we did.

The contact form, cookies and external links

The form on the contact page sends nothing to us and does not store what you type on this site. When you press "Send by e-mail", your e-mail program opens with a message ready to be sent to info@nesilsoft.com.tr. The form fields are: full name, e-mail, company (optional), topic and your message.

The message reaches us only if you send it from your e-mail program. Your e-mail provider (for example Gmail or Outlook) also processes it under its own terms.

The "Write on WhatsApp" button opens WhatsApp (wa.me) with a ready-made message. If you have filled in the message box, it contains the topic, your message and, if you entered them, your name and company; if you left it empty, it is only a short greeting. Your e-mail address is not included. This text is passed to WhatsApp inside the link as soon as you press the button. WhatsApp is operated by Meta. The message reaches us only if you send it in WhatsApp. WhatsApp's own terms of service and privacy policy apply to what you write there.

Please do not include special categories of personal data, such as health information, in your message.

This site sets no cookies and writes nothing to your browser's local storage (such as localStorage). It has no analytics, advertising or tracking tools, so there is no cookie banner.

Your language choice is not saved anywhere; the page address sets the language. English pages have addresses starting with "/en"; all other pages are in Turkish. Fonts and all scripts are served from the site itself. No requests go to outside services such as Google Fonts when a page loads.

Some links on the site lead to other websites, which have their own privacy terms:

• mynes.com.tr
• lidarnes.vercel.app
• Google Maps (Google)
• WhatsApp (Meta)

How we collect data and on what legal basis

Your browser sends the technical data automatically when you open the site, and it is written to the server logs. You provide your contact details and message yourself, electronically, when you write to us by e-mail or WhatsApp. If you make a KVKK application, you also provide its details yourself, in writing or by e-mail.

This data is processed on the following legal bases under Article 5 of the KVKK:

• KVKK Art. 5(2)(c): processing the personal data of the parties to a contract, where this is necessary and directly related to entering into or performing that contract. This applies when you write to us on your own behalf about a project, an offer, a partnership or an investment. If you write on behalf of a company, the company is the party to the contract; our correspondence with you then relies on our legitimate interests under Art. 5(2)(f).
• KVKK Art. 5(2)(ç): processing that is necessary to comply with our legal obligations. We rely on this when we answer applications under the KVKK, when we meet the retention duties of the Turkish Commercial Code and tax law if we enter into a contract, and when an authorised body requests information on a legal basis.
• KVKK Art. 5(2)(e): processing that is necessary to establish, exercise or protect a right. On this basis we keep correspondence and records of KVKK applications after the conversation or application has concluded, to protect our rights if a legal claim or dispute arises.
• KVKK Art. 5(2)(f): processing that is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms. On this basis we run and secure the site (server logs), reply to your questions and keep a record of the correspondence.

Who we may share it with

We share your personal data only with the recipient groups below, and only for the purposes stated. If a new recipient group is added, we will update this notice first.

• Our hosting provider, Vercel Inc. (USA): it processes technical request data (IP address, browser information, page requested, time) to deliver the site to you and keep it secure. Because the provider is abroad, this counts as a transfer abroad under Article 9 of the KVKK.
• The provider of our corporate e-mail service: we use its servers to receive, store and answer the e-mails you send to info@nesilsoft.com.tr.
• WhatsApp (Meta): only if you choose to write to us on WhatsApp. Your message and phone number reach us through WhatsApp's infrastructure. Meta's servers are abroad, so data sent this way is transferred abroad.
• Our lawyer and our accountant: only to meet our legal obligations if we enter into a contract, or to protect our rights if a legal claim arises.
• Authorised public bodies and courts: only where the law requires it.

How long we keep it

We keep your correspondence until your question has been answered and the conversation has concluded. After that, we keep it only as long as needed for questions or legal claims related to that correspondence. When the purpose no longer exists, your data is deleted, destroyed or anonymised.

We also keep KVKK applications and our answers to them as long as needed to show that we concluded them and to protect our rights if a complaint or dispute arises.

If we enter into a contract with you, the retention periods set by the relevant laws apply, for example the Turkish Commercial Code and tax law. Server logs are kept for the period set by the hosting provider.

Your rights

Under Article 11 of the KVKK you have the following rights:

• To learn whether your personal data is processed
• To request information about it if it is processed
• To learn the purpose of the processing and whether the data is used for that purpose
• To know the third parties in Türkiye or abroad to whom it is transferred
• To ask for it to be corrected if it is incomplete or inaccurate
• To ask for it to be deleted or destroyed under the conditions set by the law
• To ask for corrections, deletions and destructions to be notified to the third parties it was transferred to
• To object to a result against you that arises solely from analysis by automated systems
• To claim compensation if you suffer damage because of unlawful processing

How to apply

You can apply to us free of charge to use these rights. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply in one of these ways:

1) Send a letter signed by hand to our company address, or hand it in there in person. 2) E-mail info@nesilsoft.com.tr with an application signed with a secure electronic signature or mobile signature. 3) Write to info@nesilsoft.com.tr from an e-mail address you have given us before and that is in our records.

Your application must state: your full name; your Turkish ID number (for foreign nationals: nationality and passport number, or ID number if you have one); the residential or business address where official notices should be sent; if you have them, the e-mail address and phone number for notifications; and what you are requesting. Written applications must be signed.

We will conclude your application as soon as the nature of the request allows, and within 30 days at the latest of the date it reaches us, free of charge. We will either accept it or refuse it with reasons, and send you our answer in writing or electronically. If the request involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

You can file a complaint with the Personal Data Protection Board under Article 14 of the KVKK if your application is rejected, if you find the answer insufficient, or if you get no answer in time. The complaint must be filed within 30 days of learning the answer, and in any case within 60 days of your application.

Changes to this notice

If the way the site processes data changes, we will update this notice before the change takes effect. Adding a visitor analytics tool, or a form that sends messages to a server, would be such a change.

The current version is always on this page. The date at the top shows when it last changed.