PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA
As the Data Controller, while carrying out our activities as 7 TEPE BİLİŞİM SİSTEMLERİ TİCARET LİMİTED ŞİRKETİ (“7TEPE” or the “COMPANY”), we show the utmost care for the security of personal data and for the protection of fundamental rights and freedoms, above all the privacy of private life in the processing of your personal data.
Your personal data is processed by 7TEPE as the data controller. With this Privacy Notice, in accordance with the provisions of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we inform you about your personal data, the ways in which your personal data is collected and transferred, the purposes and legal grounds of processing, and your rights. The notice is organized by data-subject group: our customers and suppliers (3.1), our prospective customers (3.2), and visitors to our website and users of the quote form (3.3 and Section 7).
7TEPE reserves the right to update this Privacy Notice at any time in line with changes in legislation and changes in the purposes of processing and transferring personal data. You can always follow the updates easily on our website and in the revision history at the end of this page.
1. Data Controller
Under KVKK, your personal data may be processed, within the scope explained in this Privacy Notice on the Protection of Personal Data, by our company, 7 TEPE BİLİŞİM SİSTEMLERİ TİCARET LİMİTED ŞİRKETİ, as the data controller; a limited company established and continuing its activities in accordance with the laws of Türkiye, registered under registry number 730526 at the Istanbul Trade Registry Office, located at Cevizli Mah. Ulubey Sok. No: 4A, Nursanlar Kartal-1 Plaza Kat: 8/55, Kartal/İstanbul.
2. Personal Data, Processing of Personal Data and Processing Principles
Under KVKK, any information that makes your identity identified or identifiable constitutes your personal data. Data relating to a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data, constitute special categories of personal data.
Processing of your personal data means, under KVKK, any operation performed on the data, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of this data.
7TEPE may process personal data, in general within the scope of the Turkish Commercial Code, the Turkish Code of Obligations and other legislation, in order to continue its business activities, ensure customer satisfaction, fulfil its obligations arising from contracts, carry out the Company’s marketing activities and perform its legal obligations.
Your personal data is processed in line with the principles of lawfulness and fairness, being accurate and, where necessary, up to date, being processed for specified, explicit and legitimate purposes, being relevant, limited and proportionate to the purposes for which they are processed, and being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
3. Data Processed, Purposes and Legal Grounds by Data-Subject Group
This section explains separately, for each group of data subjects, which data is processed, for which purposes and on which legal ground. The legal grounds are the personal data processing conditions set out in Article 5 of KVKK.
3.1 Our customers and suppliers
Data processed. If you are our Customer, the personal data we process as the data controller includes your identity information (name and surname; for sole proprietorships or natural persons, the Turkish ID number as required by accounting and tax legislation), your contact information (telephone number, address, e-mail address), your professional experience information (the name of the organization you work for and your title within the organization), your financial information (your bank IBAN number, promissory note and cheque information), information on the products you have purchased, and your specimen signature. If you are our Supplier, the personal data we process includes your identity information (name and surname; for sole proprietorships or natural persons, the Turkish ID number as required by accounting and tax legislation), your contact information (telephone number, address, e-mail address), your professional experience information (the name of the organization you work for and your title within the organization), your financial information (your bank IBAN number, promissory note and cheque information), and your specimen signature.
Purposes. Ensuring the legal and commercial security of customers and suppliers, fulfilling obligations arising from legislation, carrying out retention and archiving activities, determining commercial and business strategies, carrying out information security processes, carrying out audit activities, carrying out service sales and procurement processes, continuing commercial activities, carrying out finance and accounting operations, carrying out communication activities, providing after-sales service support, informing authorized persons, institutions and organizations, following up and conducting legal affairs, carrying out risk management processes, and following up requests and complaints.
Legal basis. The processing of your personal data being necessary, provided that it is directly related to establishing a contract with you or to our performance obligation arising from that contract (e.g. our access to your identity information by obtaining the signature circular/signature declaration during the contract signing process; processing your contact information to ensure communication for the provision of the service under the signed Contract; recording your bank IBAN number to follow payment activities); the legitimate interests of the Data Controller (e.g. assessing payment performance by reading the QR code on a cheque into the system).
3.2 Our prospective customers
Data processed. If you are our Prospective Customer, the personal data we process as the data controller includes your name and surname, the organization you work for and your title in it, and your contact information (your e-mail address and telephone number), provided through the quote form on the website or through business cards you voluntarily give us at trade fairs.
Purposes. Carrying out the marketing processes of products, determining commercial and business strategies, carrying out information security processes, continuing commercial activities, carrying out communication activities, and following up requests and complaints.
Legal basis. The legitimate interests of the data controller (KVKK Article 5(2)(f)): contacting you for product promotion through your contact information on the website or through a business card you voluntarily gave us.
3.3 Visitors to our website and users of the quote form
The data processed when you visit our website and use the quote form, together with the purposes, legal grounds and retention periods, is explained separately in Section 7 below.
4. Method of Collecting Personal Data
Your personal data is obtained, so that the services we provide can be offered within the specified legal framework and so that our Company can fully and accurately perform its responsibilities arising from Contracts and legislation, through channels such as our office, the events held and the quote form on our website, from physical or electronic media, and through any oral, written or electronic media by automated or non-automated methods, and through other channels through which our Company contacts you or may contact you in the future; in this way we carry out our activities.
Personal data collected in these ways may be processed and transferred within the framework of the personal data processing conditions set out in Article 5 of KVKK and the purposes explained group by group in Section 3.
5. Transfer of Personal Data
Your collected personal data may be transferred, limited to the purposes stated in this Privacy Notice, for the purposes of carrying out the commercial activities conducted by 7TEPE in accordance with legislation and the Company’s Internal Policies and Procedures, ensuring the legal and commercial security of natural or legal persons in a business relationship with 7TEPE, continuing its commercial activities, and the other processing purposes stated in this Privacy Notice; to 7TEPE’s advisors, the company from which services are obtained for carrying out accounting processes, its auditors and/or suppliers; to our business partners and service providers that provide, operate or offer services for our IT infrastructure to our customers; to our business partners and service providers that provide services in the fields of quality control of services, complaint management and risk analysis; to the provider from which we obtain an AI assistant service; to legally authorized public institutions; to administrative authorities, judicial authorities or relevant law enforcement forces where log records are requested for the resolution of legal disputes or under the relevant legislation. Transfers abroad and the service categories involved are explained in Section 8 below (“Transfers Abroad”).
6. Rights of the Data Subject and Applications
In relation to your personal data, you have the following rights:
- (i) To learn whether it is being processed,
- (ii) To request information if your personal data has been processed,
- (iii) To learn the purpose of processing your personal data and whether it is used in line with those purposes,
- (iv) To know the third parties to whom your personal data is transferred in Türkiye or abroad,
- (v) To request correction of your personal data if it is incomplete or inaccurately processed,
- (vi) To request deletion or destruction of your personal data,
- (vii) To request that your correction, deletion and destruction requests be notified to the third parties to whom your personal data has been transferred,
- (viii) To object to the emergence of a result against you by analysis of your processed data exclusively through automated systems,
- (ix) To request compensation for the damage if you suffer damage because your personal data has been processed unlawfully.
You can submit your requests for information, correction, deletion and destruction, and your objections, in writing to the postal address below; with a secure electronic signature or mobile signature, or from the e-mail address you previously provided to us and which is registered in our system, to the e-mail address below; or by other methods determined by the Personal Data Protection Board. Your application is concluded free of charge within thirty days at the latest.
Postal address: Cevizli Mah. Ulubey Sok. No: 4A, Nursanlar Kartal-1 Plaza Kat: 8/55, Kartal/İstanbul
E-mail address: bilgi@7tepebilisim.com
7. Our Website and the Quote Form
This section explains the data processed when you visit the 7tepebilisim.com website and use the quote form.
Data processed through the quote form. Name and surname, company name and e-mail address (mandatory); telephone number, employee count range, topics you are interested in and your message (optional); your confirmation that you have read this notice, your commercial electronic message preference, the version of the privacy notice at the time of consent, the page from which you submitted the form, and the date and time of submission.
Purpose. To respond to your request, understand your need and prepare a quote. Commercial electronic messages are sent only if you tick the relevant box on the form; your request is processed even if you do not tick it.
Legal basis. Its being necessary for preparing the quote you requested and for establishing a possible contract (KVKK Article 5(2)(c)), and our legitimate interest in responding to your request (KVKK Article 5(2)(f)). For commercial electronic messages, your consent.
Method and retention. The data is collected electronically and by automated means when you fill in the form. The form content is sent by e-mail to our corporate mailboxes and kept there for the period necessary to evaluate your request and for a possible business relationship.
Preventing misuse. To prevent the form from being misused through automated submissions, your IP address is hashed and used only to check the hourly submission limit; only the submission times are kept together with the hash, and expired records are deleted.
Technical records. When you access the site, your IP address is processed by our content delivery service provider, which relays the site to us for security and speed. Our server’s access logs keep the access time, the requested page, the referring page and browser information; these records are kept for the period stipulated in legislation or required for the purpose, and then deleted. Technical records are used for the secure and proper operation of the site and for obligations arising from legislation.
Transfer. The form content is transmitted and stored on the infrastructure of the cloud service provider from which we obtain the e-mail service; it may also be processed on the infrastructure of the provider of the AI assistant service we use for the initial assessment of messages. Technical records are processed by our own servers and our content delivery service provider. Some of these providers’ servers are located abroad; which data is transferred for which purpose is set out in Section 8 below (“Transfers Abroad”).
Cookies. Our site uses only strictly necessary security cookies; it does not use measurement, advertising or tracking cookies. The strictly necessary cookies required for the secure operation of the site and their details are explained on the Cookie Policy page.
Read counts. We measure the read counts of news items from server access logs without using cookies. When you visit our site, our server’s access log shows the address of our content delivery provider instead of your IP address; the addresses of direct connection attempts blocked for security purposes may be recorded. These logs are kept for the period required for the purpose and then deleted; the counts do not contain personal data.
8. Transfers Abroad
We obtain the following services from providers some of whose servers are located abroad. For this reason, the relevant personal data is transferred abroad only for the stated purpose:
- Corporate e-mail and cloud office service: transmitting and storing quote form messages and correspondence with customers, suppliers and prospective customers (identity and contact details, message content).
- Content delivery and security service: delivering the site securely and quickly and filtering out automated attacks (IP address, browser information, strictly necessary security cookies).
- AI assistant service: initial assessment of incoming messages and preparation of replies (identity and contact details in the message, message content).
You can send your questions about these transfers and your requests under Article 11 of KVKK through the contact channels in Section 6.
9. Security
We process your personal data in accordance with the relevant legislation and our Company’s data protection policies, and we take the technical and administrative measures necessary to ensure the appropriate level of security under Article 12 of KVKK.
Revision history
| Date | Version | Change |
|---|---|---|
| 25 October 2026 | v1.0 | First publication together with the new website; replaces the previous privacy notice. Organized by data-subject group (3); sections on the website and the quote form (7) and on transfers abroad (8) added. |
| 25 October 2026 | v1.0.1 | The sections on the quote form were removed from the text until the form is added to the website; the item on AI-assisted processing of e-mail messages is unchanged. |
| 25 October 2026 | v1.0.2 | The quote form was added to the site; the form sections are in force again. |