1) Processed Personal Data

Depending on the nature of your relationship with the Company, the following personal data may be processed:

Identity/Contact: name and surname, email address, phone number, company/title, country/city information

Customer/Transaction Information: request/offer content, correspondence, meeting notes, service-related records

Website Usage Information: IP address, device/session information, log records, cookie records (cookies are explained separately in the Cookie Notice)

Legal Process/Security: records required in case of a legal dispute, information related to requests from authorized institutions

Note: The Company does not intend to process special categories of personal data (health, biometric, etc.); if it becomes necessary, additional information will be provided.

​

2) Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Receiving, responding to, and tracking communication requests

• Providing, managing, and improving consultancy services

• Managing offer, contract, invoicing, and service processes (if applicable)

• Managing customer relations and satisfaction processes

• Carrying out information security processes and ensuring system and access security

• Fulfilling obligations arising from applicable legislation and responding to requests from authorized institutions

• Managing legal processes and protecting rights

​

3) Legal Grounds

Your personal data may be processed based on the following legal grounds listed in Article 5 of the KVKK:

• Being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c)

• Compliance with the data controller’s legal obligations (KVKK Art. 5/2-ç)

• Being mandatory for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e)

• Legitimate interest of the data controller (KVKK Art. 5/2-f) (provided that it does not harm your fundamental rights and freedoms)

• Your explicit consent (KVKK Art. 5/1) (e.g., marketing communications, non-essential cookies, etc.)

​

4) Methods of Collection of Personal Data

Your personal data may be collected through:

• Forms on the website (contact/offer, etc.),

• Email, phone, online meeting tools,

• Social media/communication channels,

• Cookies and log records,

by automatic or partially automatic means, or by non-automatic means provided that it forms part of a data recording system.

​

5) Transfer of Personal Data (Recipient Groups)

Your personal data may be transferred, limited to the purposes and in compliance with the KVKK, to the following recipient groups:

• Suppliers and service providers: hosting, email infrastructure, CRM, cloud services, customer support tools, analytics/measurement services, cybersecurity services

• Business partners (to the extent necessary, e.g., jointly conducted projects)

• Authorized public institutions/organizations and judicial authorities (within the scope of legal obligations)

​

6) Transfer Abroad

If the servers of the infrastructure/service providers we use are located abroad, your personal data may be transferred abroad. In this case, the transfer is carried out in accordance with the conditions set forth in the KVKK, and with the necessary technical and administrative measures in place.

​

7) Retention Periods

Your personal data is retained:

• for the period required by the relevant processing purpose,

• for the limitation and retention periods stipulated in applicable legislation,

• for the period necessary to protect rights in case of a dispute,

and after the period expires, it is deleted, destroyed, or anonymized.

​

8) Your Rights as a Data Subject (KVKK Art. 11)

Under the KVKK, you have the right to:

• learn whether your personal data is processed,

• request information if it has been processed,

• learn the purpose of processing and whether it is used in accordance with its purpose,

• know the third parties to whom it is transferred domestically/abroad,

• request correction if it is incomplete/incorrect,

• request deletion/destruction within the framework of KVKK conditions,

• request notification of the actions taken to third parties to whom it has been transferred,

• object to a result against you arising from analysis exclusively through automated systems,

• request compensation for damages if you suffer damages due to unlawful processing.

​

9) Application Method

You can submit your requests regarding your rights via:

Email: baris@atasoleconsulting.com
Address: Fener Mah. 1987 Sok. Kurnaz2 Apt. 29/2, Muratpaşa / Antalya

​

Your application will be finalized as soon as possible and within the statutory periods in accordance with the KVKK and relevant legislation.

Effective Date: This notice enters into force on 06.03.2026. The Company may update the notice in line with legislation and its processes.