Personal Data Protection Law (KVKK) Clarification Text
Last Updated: March 19, 2026
1. Data Controller Identity
In accordance with Law No. 6698 on Protection of Personal Data ("KVKK"), your personal data will be processed by Blesyum Software and Technology Ltd. ("Blesyum" or "Company") as data controller for the purposes and scope specified below.
Name: Blesyum Software and Technology Ltd.
Tax Office / No: Yakacık Tax Office / 1781821060
Address: Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11 Kartal/Istanbul
Email: we@blesyum.com
Phone: 0216 606 14 90
2. Method and Legal Basis of Personal Data Collection
Your personal data is collected:
- By visiting our website (www.blesyum.com),
- By using our customer panel (accounts.blesyum.com),
- By filling out contact, free analysis, meeting request or other forms,
- By communicating via email, phone or face-to-face,
- By signing service contract,
- By applying for business partnership,
- By subscribing to newsletter or commercial electronic messages,
- Through cookies and automatic tracking technologies
automatically and non-automatically, verbally, in writing or electronically.
Legal Grounds: KVKK Art.5/2 (a) Explicitly stipulated in laws, (c) Contract establishment or performance, (ç) Legal obligation, (f) Legitimate interest; and in necessary cases, your explicit consent under KVKK Art.5/1.
3. Processed Personal Data Categories
| Data Category | Data Types | Processing Purpose |
|---|---|---|
| Identity Information | Name, surname, title, company name | Contract execution, invoicing, customer management |
| Contact Information | Email, phone, address | Communication, service provision, marketing |
| Customer Transaction Info | Orders, projects, payments, invoices | Service provision, accounting, legal compliance |
| Financial Information | Payment method, invoice info | Payment processing, invoicing |
| Digital Footprint | IP, cookies, device info, browsing | Analytics, personalized ads, security |
| Marketing Data | Consent records, ad interactions | Marketing campaigns, retargeting |
| Usage Data | Customer panel activity, logs | Service improvement, support, security |
| Communication Records | Emails, calls, messages | Customer relations, support, quality control |
4. Purposes of Personal Data Processing
- Establishment and performance of service contracts;
- Customer relations management and communication;
- Invoicing, accounting and financial reporting;
- Digital marketing and advertising campaigns;
- Personalized advertising and retargeting;
- Website analytics and improvement;
- Customer panel services and project tracking;
- Technical support and troubleshooting;
- Security and fraud prevention;
- Legal obligations and official requests compliance;
- Service quality improvement and R&D.
5. Transfer of Personal Data
Your personal data may be transferred to following parties:
5.1. Domestic Transfers
- Accounting and legal consultants;
- Banks and payment institutions;
- Hosting and IT service providers;
- Judicial and administrative authorities (upon official request).
5.2. International Transfers
- Google LLC (USA): Google Ads, Analytics, Tag Manager, cloud services;
- Meta Platforms Inc. (USA): Facebook, Instagram advertising;
- TikTok Pte. Ltd. (Singapore): TikTok advertising;
- LinkedIn Corporation (USA): LinkedIn advertising and analytics;
- AWS, Google Cloud: Cloud hosting services (EU and US regions).
International transfers are made only with your explicit consent, to countries with adequate protection decision, or through standard contractual clauses (SCC).
6. Storage Period of Personal Data
| Data Type | Storage Period | Legal Basis |
|---|---|---|
| Contract and invoice data | 10 years | Tax Procedure Law |
| Marketing consent | 3 years or until withdrawal | Law No. 6563 |
| Website cookies | 26 months max | GDPR |
| Communication records | 2 years | Legitimate interest |
| Customer panel logs | 2 years | Security, legitimate interest |
| Advertising data | 13 months | Platform policies |
7. Your Rights as Data Subject
Under KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed;
- Request information if processed;
- Learn the purpose of processing and whether data is used appropriately;
- Know third parties to whom data is transferred domestically or abroad;
- Request correction of incomplete or inaccurate data;
- Request deletion or destruction under KVKK Article 7 conditions;
- Request notification of correction, deletion or destruction to third parties;
- Object to negative results from automated analysis;
- Claim compensation for damages from unlawful processing.
8. Application Procedure
You can submit your requests through:
- Email: we@blesyum.com (subject: "KVKK Data Subject Application")
- Registered Mail: Yakacık Çarşı Mah. Sağlık Sok. No:14 D:11 Kartal/Istanbul
- Customer Panel: accounts.blesyum.com (Data Subject Rights section)
Your requests will be concluded free of charge within 30 days at the latest. If additional cost is required, fees determined by Personal Data Protection Board may be charged.
9. Data Security Measures
- SSL/TLS encryption (HTTPS);
- Firewall and DDoS protection;
- Regular security audits;
- Access control and authorization systems;
- Data backup and disaster recovery;
- Employee training and confidentiality agreements.
10. Contact
For questions regarding personal data processing:
Blesyum Software and Technology Ltd.
Email: we@blesyum.com | Phone: 0216 606 14 90
Last Update: February 2026