Personal Data Protection Notice

1. Identity of the Data Controller

Your personal data is processed by the data controller Caretta Yazılım ve Danışmanlık A.Ş. within the scope and on the terms set out below.

2. Personal Data Processed and How It Is Collected

If you complete and submit the “Request a Demo” or “Request a quote” form on our site, the following data, which you transmit to us electronically, is processed:

• Identity data: Full name. This field is required in order to submit the form.
• Contact data: E-mail address and telephone number. Both fields are required in order to submit the form.
• Professional data: Your role in the company and the ERP or accounting software your company uses. Both fields are optional; they are processed only if you choose to enter them.
• Company and request details: The name of your company, the number of companies you would run in Likidera, the number of people who will use Likidera, and any note you add. These describe your company and your request rather than you personally; they are processed together with the data above for the sole purpose of arranging the demo and working out the quote for the scope you described.
• Transaction and request data: The address and language version of the page from which you submitted the form, the date and time of submission, and the IP address generated technically by your connection.

The data listed above is collected only when you submit the form, on your own initiative. It is delivered through the e-mail service we use to a corporate mailbox.

The form also contains one hidden field that is not shown to you and is not intended to be filled in. It is a spam measure: an automated submission fills it, a real visitor submits it empty, and a submission that arrives with it filled is discarded without being read or stored. It carries no information about you.

Server access records. Separately from the form, the server that hosts our site keeps the connection records a web server creates automatically for every request made to it: the IP address the request came from, the date and time, the address of the page requested, and the identification string sent by your browser. These records are produced by the server itself rather than by anything you fill in. They are not matched against form submissions, and they are not used to identify, profile or track visitors; they are kept in order to keep the site secure and to diagnose technical faults.

Apart from this form and those server records, nothing on the site collects data about you.

3. Purposes of Processing

• To contact you in line with your request and to give you a tailored product presentation and demo meeting;
• To work out and send you a quote for the number of companies and users you state;
• To conduct pre-sales discussions, answer your questions and resolve your request;
• To carry out the preparatory stages of any business or contractual relationship that may be established with you;
• To keep our website and the server it runs on secure, to detect and investigate unauthorised attempts to access them, and to diagnose technical faults;
• To fulfil our Company’s legal obligations and to protect our rights in the event of a dispute.

Your personal data is processed on the basis that the information you enter is accurate, and is limited to, connected with and proportionate to the purposes above.

4. Legal Grounds for Processing

Your personal data is processed under Article 5(2) of the KVKK on the following legal grounds, without seeking your explicit consent:

• Article 5(2)(c): Processing is directly related to the conclusion or performance of a contract — that is, handling your request and the pre-contractual process;
• Article 5(2)(ç): Processing is mandatory for our Company to fulfil a legal obligation;
• Article 5(2)(f): Processing is mandatory for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms — that is, responding to your own request, and keeping our website and its server secure.

Anything unrelated to your request — such as sending you commercial electronic messages (promotions, campaigns and the like) — is carried out only on the basis of your separately obtained explicit consent, as required by the applicable legislation. This form is used solely to answer your own request.

5. Transfer of Personal Data

Your personal data may be shared with the following parties, limited to the purposes of processing and in accordance with the conditions in Articles 8 and 9 of the KVKK:

• Our service providers: Suppliers from whom we receive e-mail, server and hosting services, acting as data processors, with their confidentiality and data security obligations secured by contract;
• Authorised public institutions and judicial authorities: Where there is an obligation arising from legislation or a duly made request, to the extent prescribed by the relevant legislation.

Your personal data is processed and stored on servers located in Türkiye, and is not transferred abroad. Should this ever change, this Notice will be updated before any transfer takes place, and the transfer will be made only on one of the bases set out in Article 9 of the KVKK — an adequacy decision, appropriate safeguards, or one of the statutory exceptions.

6. Retention Period

Your personal data is retained for as long as the purpose of processing requires. Once your request has been concluded, if no business or contractual relationship is established with you, your data is deleted, destroyed or anonymised within two (2) years at the latest. Where the applicable legislation prescribes a longer retention obligation or limitation period, those longer periods apply. If a business relationship is established, retention is handled under the policy and legislation applicable to that relationship.

The server access records described in Article 2 are kept for no longer than twelve (12) months and are then deleted.

7. Cookies and Site Preferences

Our website uses your browser’s local storage (localStorage) for one purpose only: to remember the display theme you choose, light or dark. That information stays on your device, is never transmitted to us, and is not used to identify or track you.

Your language preference is not stored. The Turkish and English pages are at separate addresses, and switching between them is an ordinary link.

The site sets no cookies at all, and uses no advertising, analytics or tracking technology. It loads no third-party scripts, fonts, images or embedded content: every file the site serves comes from its own address. If analytics or cookie technologies are used in the future, this Notice will be updated and your consent obtained where required.

8. Data Security

Our Company takes the necessary technical and administrative measures to ensure an appropriate level of security, in order to prevent the unlawful processing of and unlawful access to your personal data, and to safeguard its retention.

9. Your Rights as a Data Subject (Article 11 of the KVKK)

Under Article 11 of the KVKK, you may exercise the following rights by applying to the data controller:

1. To learn whether your personal data is being processed;
2. To request information if it has been processed;
3. To learn the purpose of processing and whether the data is used in accordance with that purpose;
4. To know the third parties to whom the data is transferred, in Türkiye or abroad;
5. To request rectification if the data has been processed incompletely or inaccurately;
6. To request erasure or destruction of the data within the conditions set out in Article 7 of the KVKK;
7. To request that rectification, erasure and destruction be notified to the third parties to whom the data has been transferred;
8. To object to a result to your detriment arising from the analysis of the processed data exclusively by automated systems;
9. To claim compensation if you suffer damage because the data has been processed unlawfully.

10. How to Apply

You may submit requests relating to the rights above by the following means, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• In writing to the Company’s address, signed by hand;
• From the e-mail address you have previously notified to us and which is registered in our system, to info@caretta.net;
• By secure electronic signature or mobile signature.

Your application must state your full name; your signature if the application is in writing; your Turkish Republic identity number (for foreign nationals, your nationality and passport or identity number); your address for service of notice; your e-mail address or telephone number if any; and the subject of your request.

Your application will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. If you are not satisfied with the outcome of your application, you retain your right to lodge a complaint with the Personal Data Protection Board.

11. Changes to This Notice

Our Company reserves the right to update this Notice in line with changes in legislation and updates to its data processing activities. The current text takes effect from the moment it is published and remains available on this page.