Data Protection Notice (KVKK)

Data Controller

This notice has been prepared by Blesyum Yazılım ve Teknoloji Ltd. Şti. (the "Company") in its capacity as data controller, pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. The Company operates the website at www.bimarka.com (the "Website").

• Legal name: Blesyum Yazılım ve Teknoloji Ltd. Şti.

• Address: Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11, Kartal, İstanbul

• Tax office / number: Yakacık / 1781821060

• E-mail: hello@bimarka.com

• Telephone: +90 216 606 77 41

1. Categories of Personal Data Processed

• Identity: First name, surname, job title

• Contact: E-mail, telephone, address

• Customer transactions: Enquiry and quote details, contract and invoice details, order and payment records

• Marketing: Message preferences, campaign and analytics records

• Transaction security: IP address, server logs, cookie data, device and browser information

• Professional experience: CV, education and work history submitted with job applications

• Audio and visual: Telephone call and online meeting recordings (where prior notice has been given)

2. Purposes of Processing

Your personal data is processed solely for the following purposes:

• Receiving, evaluating and concluding enquiries, questions and applications

• Preparing quotes; concluding, performing and managing service contracts

• Carrying out invoicing, collection, accounting and finance processes

• Operating, securing and improving the Website

• Sending promotional messages, campaigns and newsletters where you have given consent

• Evaluating job applications and running recruitment processes

• Fulfilling legal obligations and responding to requests from authorised public bodies

• Constituting evidence in potential disputes and protecting legal rights

3. Legal Grounds

Your data is processed under Article 5/2 of the KVKK on the grounds that (a) processing is expressly permitted by law, (c) it is directly related to the conclusion or performance of a contract, (ç) it is necessary to fulfil a legal obligation, (e) it is necessary for the establishment, exercise or protection of a right, and (f) it is necessary for the Company's legitimate interests, provided that your fundamental rights and freedoms are not harmed. Where none of these grounds apply — in particular for marketing messages and non-essential cookies — processing is based on your explicit consent under Article 5/1.

4. Transfer of Data

Limited to the purposes above, your personal data may be transferred, in accordance with Article 8 of the KVKK, to (i) business partners providing us with hosting, e-mail, communication/CRM, analytics and payment services, (ii) our legal, tax and audit advisers, and (iii) authorised public institutions upon request.

Where service providers with servers located abroad are used, transfers are carried out within the conditions set out in Article 9 of the KVKK (adequacy decision, standard contract, explicit consent, etc.).

5. Method of Collection

Your data is collected by partly automated and non-automated means through the contact, quote and career forms on the Website, e-mail and telephone correspondence, online meetings, cookies and server logs, and through contract processes.

6. Your Rights under Article 11 of the KVKK

• To learn whether your personal data is being processed

• To request information if it has been processed

• To learn the purpose of processing and whether the data is used in line with that purpose

• To know the third parties to whom the data is transferred, in Türkiye or abroad

• To request the correction of incomplete or inaccurate data

• To request its erasure or destruction under Article 7 of the KVKK

• To request that correction, erasure and destruction be notified to third parties to whom the data was transferred

• To object to a result against you arising from analysis carried out exclusively by automated systems

• To claim compensation if you suffer loss due to unlawful processing

7. How to Apply

You may submit requests concerning your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in two ways:

• In writing: by wet-signed petition sent to Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11, Kartal, İstanbul, together with documents confirming your identity

• By e-mail: to hello@bimarka.com, from the e-mail address registered in our systems

Your application must contain your full name, your signature if submitted in writing, your Turkish ID number (passport number for foreign nationals), your address for notification, your e-mail and telephone if applicable, and the subject of your request.

Applications are concluded free of charge within 30 (thirty) days at the latest; where the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, the response is found insufficient or no response is given within the period, you retain the right to lodge a complaint with the Personal Data Protection Board.

8. Retention Period

Your personal data is retained for as long as necessary for the purpose for which it was processed, together with the statutory limitation periods and retention obligations set out in the applicable legislation. Once the period expires, the data is erased, destroyed or anonymised.

9. Updates

The Company may update this notice in line with changes in legislation and business processes. The current version is always published on the Website; the date at the top of the page shows the last update.