Personal Data Protection Disclosure

Data Controller and Contact Information

• Data Controller: KURUMSAL YAZILIM A.S.
• Address: Ikitelli OSB Mh. 10. Cadde 34 Portall Plaza No: 7D/5 34490 Basaksehir - Istanbul / TURKEY
• Phone: +90 264 606 07 16
• Email: info@harmonyerp.com.tr
• Web: https://www.harmonyerp.cloud

Scope and Data Subject Groups

• Website visitors
• Prospective customers who fill in contact/demo request forms
• Individuals who consent to commercial communications

Categories of Personal Data We Process

• Identity: full name
• Contact: email, phone, city
• Company Information: company name, industry
• Transaction Information: form contents, your message
• Marketing/Tracking: cookie data, device/access information, referrer URL, campaign parameters (e.g., UTM)
• Technical Logs: IP address, browser information, timestamp

Purposes of Personal Data Processing

• Providing information about our products and services, fulfilling demo/quote requests
• Conducting communication processes and responding to inquiries
• Conducting pre-contractual negotiations and managing customer relationships
• Improving service quality, measurement/reporting, and improvement activities
• Fulfilling our obligations arising from legislation and managing disputes
• Sending promotional, campaign, and commercial messages with explicit consent

Collection Methods and Legal Grounds

• Methods: web forms, email/phone, cookies and analytics tools
• Legal Grounds (KVKK Art.5):
• Expressly provided for by law (Art.5/2-a)
• Directly related to the establishment or performance of a contract (Art.5/2-c)
• Legitimate interest of the data controller (Art.5/2-f)
• Explicit consent (Art.5/1) -- for commercial electronic messages and optional marketing/cookies

Transfer of Data

• Recipient Groups: hosting/IT infrastructure providers, email/SMS operators, analytics and measurement service providers, consulting/legal/audit firms, call center and support service providers, and official authorities when required.
• Cross-Border Transfers: In cases where infrastructure/service providers are located abroad, limited and proportionate transfers may be made in compliance with KVKK, either to countries with adequate protection or through commitment/permission mechanisms.

Retention Periods

• Contact/demo request records: up to 3 years depending on the nature of the request
• Records that become part of a contractual/account relationship: for the duration of relevant legislation and statute of limitations periods
• Marketing data: until explicit consent is withdrawn or up to 2 years
• Cookie/data logs: as specified in the Cookie Policy

At the end of the retention period, data is deleted, destroyed, or anonymized in accordance with legislation.

Rights of the Data Subject (KVKK Art.11)

By contacting us, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your data has been processed,
• Learn the purpose of processing and whether data is used in accordance with that purpose,
• Know the third parties to whom data has been transferred domestically or abroad,
• Request correction if data has been processed incompletely or incorrectly,
• Request deletion/destruction in accordance with KVKK and relevant legislation,
• Request notification of correction/deletion/destruction operations to third parties to whom data has been transferred,
• Object to any adverse outcome arising from the analysis of processed data exclusively through automated systems,
• Claim compensation for damages incurred due to unlawful processing of data.

Application Procedure

You may submit your requests regarding your rights free of charge through:

• Email: info@harmonyerp.com.tr (subject: "KVKK Application")
• Mail: Ikitelli OSB Mh. 10. Cadde 34 Portall Plaza No: 7D/5 34490 Basaksehir - Istanbul

Your applications will be concluded within 30 days at the latest, depending on the nature of the request. In case of additional costs, fees as determined by the Board may apply.

Cookies and Similar Technologies

Our website may use essential, performance, functional, and marketing/advertising cookies. You can manage your cookie preferences through your browser settings. For details, please refer to the Cookie Policy when published.

Security Measures

Personal data is protected against unauthorized access, loss, or unlawful processing through administrative and technical measures (access controls, logging, encryption, network security, backups, etc.). Necessary confidentiality and data processing agreements are established with our suppliers.

Commercial Messages

If you provide your explicit consent/approval, informational and marketing content related to our products and services may be sent to you. You can withdraw your consent at any time using the "unsubscribe" methods provided in the messages.

Updates

This notice may be updated as needed. The current version is published on our website.