Feedback & Complaints Privacy Notice

1. Data Controller

This notice explains, pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK"), how your personal data is processed when you make a submission through the Feedback & Complaints form. The data controller is On Yazılım Finansal Eğitim ve Sağlık Hizmetleri Danışmanlığı Dış Tic. Ltd. Şti., located at Balcalı Mh. Güney Kampüs 5 Sk. Teknokent A blok Kat 1 No 4/A111 Sarıçam Adana.

2. Personal Data Processed

When you submit without sharing your name, no name or contact details are requested, and the form does not add your IP address to the submission record. The data processed is as follows:

• Submission content: type of submission, related project or activity, subject, your description, date and place of the incident, the resolution you expect and any file you attach
• If you choose to share them: your full name or organisation, your relationship with On Yazılım, your email address or phone number
• Information you write about the people mentioned in your submission

Please do not share special categories of personal data, such as health information, unless it is necessary for your submission.

3. Purposes of Processing

Your personal data is processed only for the following purposes:

• Recording, reviewing and concluding your submission
• Replying to you, if you asked for a reply
• Reporting submissions by number, subject and resolution time in a form that does not identify anyone

4. Method of Collection and Legal Basis

Your personal data is collected electronically when you fill in the form and is processed on the legal basis set out in Article 5(2)(f) of the KVKK, namely that processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms. Your explicit consent is not requested for this processing.

5. Transfer of Personal Data

Your submission is forwarded only to the authorised people responsible for the review. The form content is delivered to our company mailbox through an email delivery provider that we use and that is established abroad. If your submission concerns a publicly funded project, only summary information that does not identify anyone is reported to the funding institution. Where a legal obligation arises, the information may be shared with the competent public authorities.

6. Retention Period

Submission records are kept for as long as required by the review process and by the related reporting and statutory retention obligations; at the end of that period they are deleted or anonymised.

7. Your Rights

Under Article 11 of the KVKK, you have the right to learn whether your personal data is being processed, to request information if it has been processed, to learn to whom it has been transferred, to request its correction or deletion, to object to the processing, and to claim compensation for damage you incur as a result of unlawful processing. For anonymous submissions, because we do not know your identity, you need to quote your reference number so that we can match your request with your submission.

8. Requests

You may submit requests regarding your rights in writing or by sending them to the email address below: