This notice has been prepared by KRY Loyaltech Teknoloji Proje Geliştirme A.Ş. pursuant to the disclosure obligation under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK), to explain how your personal data is processed in connection with the request you submit via the contact form on the website.
Identity of the Data Controller
- Data Controller
- KRY Loyaltech Teknoloji Proje Geliştirme A.Ş. (the “Company” or “KRY” · Loyexo · a D-Cat Group company; a joint-stock company incorporated in Türkiye)
- Trade Registry
- Registered with the Istanbul Trade Registry Office
- Tax ID No.
- 5901384130
- Address
- Kavacık Mah. Muhtar Sk. No: 5 İç Kapı No: 4, Beykoz / İstanbul, Türkiye
- Phone
- 0850 304 7595
- info@loyexo.com
- Website
- /en/
1.Information on the Data Controller
Pursuant to the Law, the Data Controller is KRY Loyaltech Teknoloji Proje Geliştirme A.Ş., registered with the Istanbul Trade Registry Office, holding tax identification number 5901384130 and having its registered office at “Kavacık Mah. Muhtar Sk. No: 5 İç Kapı No: 4, Beykoz / İstanbul”.
2.Categories and Types of Personal Data Processed
| Category | Data Types |
|---|---|
| Identity Data | Name, surname |
| Contact Data | E-mail address, telephone number |
| Professional / business information (only where it contains personal data) | Company/organisation name |
| Message content (only where it contains personal data) | Request/suggestion/complaint conveyed via the form |
3.Method of Collection and the Activity from which Data is Obtained
As the Company, we collect your personal data by automated means.
| Data Category | Activity from which Obtained |
|---|---|
| Identity | By automated means; the “Contact / Get in Touch / Contact Us” contact form available on the website |
| Contact | By automated means; the “Contact / Get in Touch / Contact Us” contact form available on the website |
| Professional / business information | By automated means; the “Contact / Get in Touch / Contact Us” contact form available on the website |
| Message content | By automated means; the “Contact / Get in Touch / Contact Us” contact form available on the website |
4.Purposes of Processing and Legal Grounds
Your personal data is processed within the limits set out in the Law, in a manner that is lawful and fair, connected with, limited to and proportionate to the purposes below.
| Data | Purposes of Processing | Legal Ground |
|---|---|---|
| Identity, Contact |
|
KVKK Art. 5(2)(c) and (f): (c) processing being necessary for the parties to a contract, provided that it is directly related to the conclusion or performance of that contract; (f) processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Professional / business information, Message content |
|
KVKK Art. 5(2)(c) and (f) (the same legal grounds as opposite). |
5.Transfer of Personal Data
| Recipients | Purposes of Transfer | Legal Ground |
|---|---|---|
| Authorised departments and managers within the Company; and, where deemed necessary, authorised public institutions and organisations |
|
By reference to KVKK Art. 8(2)(a): transfer being mandatory for the legitimate interests of the data controller without harming the fundamental rights and freedoms of the data subject, and being mandatory for the data controller to fulfil its legal obligations. |
| Domestically located servers and infrastructure belonging to the Company used in server and data-hosting processes |
|
By reference to KVKK Art. 8(2)(a) (the same legal grounds as opposite). |
6.Rights of the Data Subject and Application
At any time you may apply to the Company and exercise the following rights arising from Article 11 of the KVKK:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used in accordance with such purpose,
- Know the third parties to whom it is transferred domestically or abroad,
- Request rectification if processed incompletely or inaccurately,
- Request erasure or destruction within the scope of Article 7 of the KVKK,
- Request that rectification/erasure operations be notified to third parties to whom the data was transferred,
- Object to any result arising against you through analysis exclusively by automated systems,
- Claim compensation for damage arising from unlawful processing.
You may submit your requests by completing the application form available at /en/, or by a petition bearing the mandatory elements, through the following methods:
- By completing the application form and delivering it wet-signed to “Kavacık Mah. Muhtar Sk. No: 5 İç Kapı No: 4, Beykoz / İstanbul” via notary public, by registered mail with return receipt, or in person;
- By sending an e-mail to info@loyexo.com from the e-mail address you have notified to and registered with the Company.
For written responses, the Company charges no fee for up to ten pages; for each page exceeding ten pages, a processing fee of TRY 1 is charged. Where the response is provided on a recording medium such as a CD or flash drive, the fee that may be charged shall not exceed the cost of the recording medium.
The application must be clear and comprehensible and must concern you personally (if you are acting on behalf of another person, a notarised special power of attorney must be submitted). Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the elements of name-surname, signature, Turkish ID number, address, e-mail, telephone and the subject of the request are mandatory; applications lacking these elements may be rejected or directed to the valid application channels.
This document may be updated from time to time by the Company due to changes in legislation, regulations or operational requirements; updates take effect as of their date of publication on the website.