Information notice on the processing of personal data.

1. Data controller

The decisions on the processing of your personal data in the communication and service-promotion activities carried out under the BaysSystems brand are taken, as data controller and as a natural person, by Şeref Baysal [awaiting approval].

BaysSystems is a brand; it has not yet been established as a separate legal entity (company).

Contact: contact@bayssystem.com

2. Personal data processed

If you contact BaysSystems, the following data may be processed, to the extent you share it:

• Identity: your first name and surname
• Contact: your e-mail address; if you write on WhatsApp, your phone number and WhatsApp profile name
• Professional: the name and sector of your business and your role
• Request: the subject of your request and the content of your messages
• Customer transaction: correspondence about the proposal and initial-call process

When you visit the website, the servers of the hosting provider Hostinger automatically record your IP address, the time of access, the page viewed, browser information and the approximate country derived from the IP address (access logs).

Please do not share health data, identification numbers or sensitive information about third parties in your messages.

3. Purposes and legal bases

Your personal data is processed for the following purposes, each on the legal basis stated:

• Answering your request, holding the initial call and needs assessment, informing you about the services you ask about and preparing a proposal if you request one — KVKK Art. 5/2-(c): directly related to the establishment of a contract
• Following up the communication and proposal process — KVKK Art. 5/2-(f): legitimate interest, provided your fundamental rights and freedoms are not harmed
• Keeping correspondence in relationships that become contracts and using it in a possible dispute — KVKK Art. 5/2-(e): establishment, exercise or protection of a right
• Answering KVKK applications and meeting legal obligations such as requests from competent authorities — KVKK Art. 5/2-(ç): compliance with a legal obligation
• Ensuring the security and operation of the website and the communication infrastructure (access logs) — KVKK Art. 5/2-(f): legitimate interest

Your personal data is not used for marketing.

4. Method of collection

Your contact data is collected electronically through the messages you send us on WhatsApp or by e-mail.

The request form on this website does not send your data to a server and does not store it. It only opens the text you wrote in your own WhatsApp or e-mail app; the message does not reach us until you send it.

Access logs are created automatically by the hosting provider's servers when you visit the website.

5. Transfers of personal data

Your personal data is processed on the systems of the following service providers used to run communication and the website:

• Hostinger (Hostinger International Ltd., Cyprus) — website hosting; server country: [To be determined: website server country]
• Hostinger — e-mail service; mail server country: [To be determined: mail server country]
• WhatsApp (WhatsApp LLC, USA) — messaging; WhatsApp uses Meta's global infrastructure, including in the United States

Because these providers' systems are located abroad, your personal data is transferred abroad. Basis for the transfer under KVKK Article 9: [To be determined: basis for cross-border transfer]

Your personal data may also be shared with competent public authorities where there is a legal obligation to do so.

6. Retention and deletion

Your personal data is kept for as long as necessary for the purposes for which it is processed. When the purpose no longer applies and no other legal obligation requires retention, it is erased, destroyed or anonymised. The periods applied:

• Contact requests that do not lead to a proposal or contract: 1 year from the last message. [awaiting approval]
• Proposal and initial-call correspondence that does not lead to a contract: 1 year from the date the proposal is declined or withdrawn, or from the last message. [awaiting approval]
• Correspondence and related records that lead to a contract: 10 years from the end of the contractual relationship. [awaiting approval]
• Website access and security logs: kept by the hosting provider Hostinger under Hostinger's own policy; we do not copy them. [awaiting approval]
• Applications under the KVKK and our replies: 3 years from the date the application is concluded. [awaiting approval]

7. Your rights under KVKK Article 11

By applying to the data controller you may:

• learn whether your personal data is processed,
• request information if it has been processed,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties to whom it is transferred in Türkiye or abroad,
• request correction if it is incomplete or inaccurate,
• request erasure or destruction under the conditions of KVKK Article 7,
• request that third parties to whom the data was transferred be notified of such correction, erasure or destruction,
• object to a result against you arising exclusively from automated analysis,
• claim compensation for damage arising from unlawful processing.

8. How to apply

You can submit your application by the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller:

• by e-mail to contact@bayssystem.com from an e-mail address you have previously given us and that is in our records
• in writing, with a signed (wet-ink) petition, to: [To be determined: address for written applications]

Your application must include your name and surname, your Turkish ID number if you are a Turkish citizen (or, if you are a foreign national, your nationality and passport or ID number), your address for notifications, your e-mail address and phone number if any, and the subject of your request. We may ask for additional information to verify that the application is yours.

Under KVKK Article 13, your application is concluded free of charge as soon as possible according to its nature and within thirty days at the latest. If the action requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

If your application is rejected, you find the answer insufficient, or no answer is given in time, you may file a complaint with the Personal Data Protection Board under KVKK Article 14.