Privacy Notice for Suppliers, Service Providers, Consultants

As HİPPOSOFT SOFTWARE LTD. CO., in our capacity as the data controller, we place great importance on the security of your personal data. Accordingly, all personal data held within our organization are processed, stored, and transferred in compliance with the Personal Data Protection Law No. 6698 (“KVKK”).

Our company attaches great importance to ensuring that the personal data of real person service providers, suppliers, consultants, and their employees, with whom we conduct business, are processed and protected in accordance with the Personal Data Protection Law No. 6698.

The first article of the "Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform," published in the Official Gazette dated 10.03.2018 and numbered 30356, defines its purpose as follows: "to determine the procedures and principles to be followed under the obligation to inform that must be fulfilled by data controllers or persons authorized by them in accordance with Article 10 of the Personal Data Protection Law No. 6698."

This privacy notice has been prepared by our company, in its capacity as the data controller, to inform "real person service providers, suppliers, consultants, and their employees" whose personal data are collected, stored, and processed in accordance with Article 10 of the Personal Data Protection Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data are processed in accordance with the general principles outlined in Article 4 of the Personal Data Protection Law, which include: being lawful and fair, accurate and up-to-date when necessary, processed for specific, explicit, and legitimate purposes, relevant and limited to the purposes for which they are processed, and retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

The purposes of processing your personal data and the legal grounds for such processing, as outlined in Articles 5 and 6 of the Law, are provided below:

• Identity Information (name, surname, Turkish ID number) and Contact Information (residential address, business address, phone number, mobile phone number, email address, registered email address):
  Processed for the purpose of performing transactions related to signed contracts and ensuring the conduct of activities in compliance with legislation, in accordance with Article 5/2-c of the KVKK, which allows for the processing of personal data if it is necessary for the performance of a contract to which the data subject is a party.

• Identity Information and Contact Information:
  Processed for the purpose of fulfilling legal obligations imposed by regulatory requirements, in accordance with Article 5/2-a of the KVKK, which allows for processing where it is explicitly stipulated by law.

• Name, Surname, Phone Number, Mobile Phone Number, Email Address, Address:
  Processed for the purpose of following up on requests and complaints, establishing communication, and sending documents, in accordance with Article 5/2-f of the KVKK, which allows for processing when necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• Procurement and Service Agreements:
  Processed for the purpose of fulfilling the obligations of signed contracts, conducting contract processes, and providing the legal infrastructure for the procurement of goods and services, in accordance with Article 5/2-c of the KVKK, which allows for the processing of personal data if it is necessary for the performance of a contract to which the data subject is a party.

• Financial Information (tax number, tax office, bank account number, bank IBAN number, invoice and e-invoice date, service document number, service fee, invoice record number, payment date, payment method) along with Identity Information and Contact Information:
  Processed for accounting records and the creation of current accounts, for the conduct of financial and accounting affairs in compliance with legal regulations, in accordance with Article 5/2-a of the KVKK, which allows for processing where stipulated by law, and for payment and collection purposes, in accordance with Article 5/2-ç of the KVKK, which allows for processing when necessary for the data controller to fulfill its legal obligations.

• Legal Process Information (contracts, notices, and official notifications, legal process documents and information):
  Processed for the purpose of performing transactions related to signed contracts and protocols, fulfilling our legal obligations to public authorities and courts, and using such information as evidence in potential disputes, in accordance with Article 5/2-ç of the KVKK, which allows for processing when necessary for the data controller to fulfill its legal obligations.

TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES AND PURPOSE

Our company complies with the provisions of Article 5 of the Law regarding the general conditions for processing personal data, Article 6 regarding the processing of special categories of personal data, and Articles 8 and 9 regarding the transfer of personal data, as well as the decisions issued by the Personal Data Protection Board.

The following outlines the parties to whom your personal data are transferred and the purposes of such transfers.