Personal Data Protection Law

Information Notice on the Protection of Personal Data

Tikto Teknoloji Hizmetleri A.Ş. (“Tikto” or the “Company”) attaches great importance to the security and confidentiality of your personal data. Within this scope, this Information Notice has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) to inform you, as the data controller, about the processing, storage, sharing of your personal data, and your rights.

Identity of the Data Controller

Data Controller:
Title: Tikto Teknoloji Hizmetleri A.Ş.
Address: Celal Bayar University Campus, Technopark, No: 22
E-mail: info@tikto.com.tr
Phone: +90 232 478 32 57
Website: www.tikto.com.tr

Purposes of Processing Personal Data

Your collected personal data is processed within the framework of Articles 5 and 6 of the KVKK for the following purposes:

• Providing and improving digital products and services and ensuring customer satisfaction
• Creating and managing user accounts
• Carrying out order, billing, and payment processes
• Managing customer support processes
• Managing post-service support and requests
• Conducting analyses to improve user experience
• Carrying out campaigns, promotions, and informational activities (with explicit consent)
• Fulfilling legal obligations
• Implementing cybersecurity and data protection measures

Categories of Processed Personal Data

The categories of personal data processed by Tikto are as follows:

• Identity information: Name, surname
• Contact information: Phone number, e-mail address
• Service usage information: User behavior, transaction history
• Device and session information: IP address, browser type, access time
• Request and complaint information: Feedback forms, support records
• Marketing data: Newsletter subscriptions and campaign participation preferences (with explicit consent)

Methods of Collecting Personal Data

Your personal data is collected through the following digital and electronic channels:

• Transactions made through our website (www.tikto.com.tr) and mobile applications
• Support forms, contact boxes, and live chat systems
• Automatic cookies and analytics tools (Google Analytics, Hotjar, etc.)
• E-mail or phone communications
• Online payment systems

Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds:

• Establishment or performance of a contract (KVKK Art. 5/2-c)
• Compliance with the legal obligations of the data controller (KVKK Art. 5/2-ç)
• Processing being necessary for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e)
• Processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f)
• Obtaining explicit consent (KVKK Art. 5/1 and Art. 6)

Transfer of Personal Data

Your personal data may be transferred in accordance with Articles 8 and 9 of the KVKK to:

• Business partners providing infrastructure and hosting services
• Payment system providers
• Information technology support companies
• Authorized public institutions and organizations
• Individuals and organizations providing legal, financial consultancy, and advisory services

Transfer of data abroad: With your explicit consent, your data may be transferred to service providers located abroad, such as e-mail service providers or cloud service providers.

Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is processed
• To request information regarding such processing
• To learn the purpose of processing and whether it is used appropriately for that purpose
• To know the third parties to whom your data is transferred domestically or abroad
• To request correction if your personal data is incomplete or inaccurate
• To request deletion or destruction of your data in accordance with the KVKK
• To request notification of correction/deletion requests to third parties to whom data has been transferred
• To object to any result that is detrimental to you arising from the analysis of processed data exclusively through automated systems
• To request compensation for damages in case of unlawful processing of your personal data