Logo
Bites Logo

Personal Data Protection and Processing Policy

BİTES shows utmost sensitivity to the lawful processing and protection of personal data in accordance with the Personal Data Protection Law No. 6698. This policy aims to explain the systems related to the processing and protection of personal data and to inform the relevant individuals.

1. Purpose

The main purpose of this policy is to provide explanations regarding the systems for the processing and protection of personal data in accordance with the law and the purpose of the Law.

2. Scope

This policy covers all personal data processed by BİTES automatically or by non-automatic means provided that they are part of a data recording system.

3. Definitions and Abbreviations

  • KEP: Registered Electronic Mail
  • Personal Data: Any information relating to an identified or identifiable real person
  • Special Categories of Data: Sensitive data such as race, health, criminal conviction, biometric data
  • Data Controller: The natural or legal person who determines the purposes of processing data

4. References and Sources

  • Personal Data Protection Law No. 6698
  • Regulation on Deletion and Anonymization of Personal Data
  • Communiqué on the Obligation to Inform

5. Processing and Transfer of Data

Personal data is processed and may be transferred domestically or abroad based on explicit consent or legal grounds within the framework of the principles and conditions specified in the law.

6. Data Categories and Recipients

The following data categories may be processed by BİTES:

  • Identity, contact, personnel, transaction security, finance, health information
  • Professional experience, customer transactions, visual-auditory data
  • Physical space security, legal transaction, risk management information

Data may be shared with shareholders, suppliers, public institutions and authorized persons.

7. Collection Method, Destruction and Retention Period

Data may be collected verbally, in writing, or electronically. The retention period is limited by legal obligations. When the period expires, data is destroyed.

8. Rights and Application Process

  • To learn whether personal data is processed
  • To question whether it is used in accordance with its purpose
  • To request correction of incomplete/incorrect data
  • To request its deletion or destruction
  • The right to complain to the Data Protection Authority

Applications can be submitted to BITES with a signed form, by hand, at a notary, or via KEP. Email: kvkbasvuru@bites.com.tr

9. Updates

This policy may be updated when necessary. The most current version is published in official sources.