Personal Data Protection Law (KVKK) Clarification Text

Last Updated: March 19, 2026

1. Data Controller Identity

In accordance with Law No. 6698 on Protection of Personal Data ("KVKK"), your personal data will be processed by Blesyum Software and Technology Ltd. ("Blesyum" or "Company") as data controller for the purposes and scope specified below.

Name: Blesyum Software and Technology Ltd.
Tax Office / No: Yakacık Tax Office / 1781821060
Address: Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11 Kartal/Istanbul
Email: we@blesyum.com
Phone: 0216 606 14 90

2. Method and Legal Basis of Personal Data Collection

Your personal data is collected:

By visiting our website (www.blesyum.com),
By using our customer panel (accounts.blesyum.com),
By filling out contact, free analysis, meeting request or other forms,
By communicating via email, phone or face-to-face,
By signing service contract,
By applying for business partnership,
By subscribing to newsletter or commercial electronic messages,
Through cookies and automatic tracking technologies

automatically and non-automatically, verbally, in writing or electronically.

Legal Grounds: KVKK Art.5/2 (a) Explicitly stipulated in laws, (c) Contract establishment or performance, (ç) Legal obligation, (f) Legitimate interest; and in necessary cases, your explicit consent under KVKK Art.5/1.

3. Processed Personal Data Categories

Data Category	Data Types	Processing Purpose
Identity Information	Name, surname, title, company name	Contract execution, invoicing, customer management
Contact Information	Email, phone, address	Communication, service provision, marketing
Customer Transaction Info	Orders, projects, payments, invoices	Service provision, accounting, legal compliance
Financial Information	Payment method, invoice info	Payment processing, invoicing
Digital Footprint	IP, cookies, device info, browsing	Analytics, personalized ads, security
Marketing Data	Consent records, ad interactions	Marketing campaigns, retargeting
Usage Data	Customer panel activity, logs	Service improvement, support, security
Communication Records	Emails, calls, messages	Customer relations, support, quality control

4. Purposes of Personal Data Processing

Establishment and performance of service contracts;
Customer relations management and communication;
Invoicing, accounting and financial reporting;
Digital marketing and advertising campaigns;
Personalized advertising and retargeting;
Website analytics and improvement;
Customer panel services and project tracking;
Technical support and troubleshooting;
Security and fraud prevention;
Legal obligations and official requests compliance;
Service quality improvement and R&D.

5. Transfer of Personal Data

Your personal data may be transferred to following parties:

5.1. Domestic Transfers

Accounting and legal consultants;
Banks and payment institutions;
Hosting and IT service providers;
Judicial and administrative authorities (upon official request).

5.2. International Transfers

Google LLC (USA): Google Ads, Analytics, Tag Manager, cloud services;
Meta Platforms Inc. (USA): Facebook, Instagram advertising;
TikTok Pte. Ltd. (Singapore): TikTok advertising;
LinkedIn Corporation (USA): LinkedIn advertising and analytics;
AWS, Google Cloud: Cloud hosting services (EU and US regions).

International transfers are made only with your explicit consent, to countries with adequate protection decision, or through standard contractual clauses (SCC).

6. Storage Period of Personal Data

Data Type	Storage Period	Legal Basis
Contract and invoice data	10 years	Tax Procedure Law
Marketing consent	3 years or until withdrawal	Law No. 6563
Website cookies	26 months max	GDPR
Communication records	2 years	Legitimate interest
Customer panel logs	2 years	Security, legitimate interest
Advertising data	13 months	Platform policies

7. Your Rights as Data Subject

Under KVKK Article 11, you have the right to:

Learn whether your personal data is being processed;
Request information if processed;
Learn the purpose of processing and whether data is used appropriately;
Know third parties to whom data is transferred domestically or abroad;
Request correction of incomplete or inaccurate data;
Request deletion or destruction under KVKK Article 7 conditions;
Request notification of correction, deletion or destruction to third parties;
Object to negative results from automated analysis;
Claim compensation for damages from unlawful processing.

8. Application Procedure

You can submit your requests through:

Email: we@blesyum.com (subject: "KVKK Data Subject Application")
Registered Mail: Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11 Kartal/Istanbul
Customer Panel: accounts.blesyum.com (Data Subject Rights section)

Your requests will be concluded free of charge within 30 days at the latest. If additional cost is required, fees determined by Personal Data Protection Board may be charged.