CLARIFICATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698 (“KVKK”)
As CRESTU Data Center Services ("CRESTU"), we prioritize the personal data and privacy of our valued customers ("customer"). Personal data obtained within the framework of the principle of privacy and respect for fundamental rights and freedoms are processed by our company in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”). Processing is defined in Article 3 of KVKK as the recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, and classifying personal data.
Collected Personal Data and Collection Methods
Within the framework of applicable legislation, CRESTU collects and uses the following data provided by customers during registration on our website:
- Name and surname
- Company name (if applicable)
- Address
- Telephone numbers
- Email address
- Billing details (if applicable)
- Turkish ID number
- Access and traffic information
- Email communications
- Phone conversations with our call center
- Interactions via social media accounts
We collect this data verbally, physically, or electronically to fulfill legal obligations, execute the sales agreement between CRESTU and the customer, and for purposes prescribed by law.
Recording and Use of Personal Data
Your personal data will be processed by CRESTU within the scope of the conditions and purposes outlined in Articles 5 and 6 of KVKK, including but not limited to:
- Providing products or services, planning pre- and post-sales processes, and conducting technical support and operational activities
- Ensuring continuity of communication during technical maintenance, repair, and installation services
- Maintaining financial and accounting records
- Improving service quality
- Verifying identity and obtaining consent in risk-sensitive transactions
- Providing information when requested by judicial or administrative authorities
- Sending newsletters and notifications within the framework of approved marketing campaigns
- Conducting risk analysis for customers and ensuring security inspections
Sharing and Transfer of Personal Data
Your personal data is not shared with third parties. However, it may be transferred to servers of applications we use to facilitate specific activities. These include:
- PayTR Payment and Electronic Money Corporation: For credit card payments, refunds, and transactions, personal data such as your name, surname, invoice number, amount, and payment date are shared. Credit card information is never stored in our systems, even at your request.
- Paraşüt Software Technologies Inc.: For issuing invoices, billing data is recorded using the Parasut software.
- Accounting Firms: Customer data, including name, surname, Turkish ID number, tax office, country, city, tax number, and contract amount, may be shared to prepare stamp tax declarations and approve invoices.
In addition to these, personal data may be shared with law enforcement, prosecution offices, and courts to fulfill legal obligations.
Rights of the Data Subject Under Article 11 of KVKK
Under KVKK, you have the right to:
- Learn whether your personal data is being processed
- Request information if your data has been processed
- Learn the purpose of processing and whether it is being used in accordance with its purpose
- Know the third parties in Turkey or abroad to whom your personal data has been transferred
- Request correction of incomplete or inaccurate personal data
Requests submitted to CRESTU will be concluded within 30 days at the latest.
How to Exercise Your Rights
To exercise your rights, you may submit a wet-signed petition to the address:
CRESTU
Yunus Emre Mah. 565 Sk. No:54 D:5
SULTANGAZİ / İSTANBUL
You may also deliver your petition in person with your identification or send it via a registered or known email address to [email protected].
Turkey (Türkçe)