User Agreements

BYTEDEX TECHNOLOGIES OU CLARIFICATION TEXT FOR CUSTOMERS

As Bytedex Technologies OÜ and its Turkish Affiliate Planmodern Mühendislik Bilişim ve Enerji Sanayi ve Ticaret Limited Şirketi (“Our Company” or “Bytedex” or “Byte Exchange”), we show the utmost sensitivity to process and protect the personal data of our customers in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and its secondary regulations and the Decisions of the Personal Data Protection Board (“KVK legislation”).

This Disclosure Text for Customers (“Disclosure Text”) has been prepared in order to fulfill the disclosure obligation arising from the KVK legislation as the data controller within the scope of personal data processing activities carried out by our Company for its customers.

1. Your Processed Personal Data, Collection Methods, Purposes of Processing and Reasons for Lawfulness

Your personal data (“your personal data”) specified below are obtained and processed by our Company through the website, mobile or digital applications, customer interviews made via telephone/mobile/internet, written and digital applications made to our Company, electronic, verbal or physical means in a limited and measured manner in connection with the following purposes and in accordance with the principles of the KVKK in accordance with the KVKK legislation by automatic and non-automatic means.

• Your identity information (name, surname, gender, date of birth, Turkish ID number, identity card number, driver’s license number, passport number, residence permit number, place of birth, parents’ name, nationality) to meet the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation; Notifying MASAK of suspicious transactions, keeping information on internet usage within the scope of legal obligation and issuing e-ledgers, following and conducting litigation, following and conducting mediation, following and conducting enforcement proceedings,
• Your contact information (telephone number, e-mail address, address, fax number) is used to meet the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation; to notify MASAK of suspicious transactions, to keep information on internet usage within the scope of legal obligation and to issue e-ledgers, to follow up and conduct litigation, to follow up and conduct mediation, to follow up and conduct enforcement proceedings,
• Your transaction security information (IP address information, MAC number, log records) to meet the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation, and to keep information on internet usage within the scope of legal obligation,
• Your visual and audio records (identity photographs) are used to meet the information requests of the prosecutor’s office, police department, gendarmerie and courts regarding customers within the scope of legal obligation,
• Your financial information (account movements, bank account information, asset information) meeting the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation; reporting suspicious transactions to MASAK, following and conducting litigation, following and conducting mediation, following and conducting enforcement proceedings,
• Your professional experience information (profession) Reporting suspicious transactions to MASAK,
• Your legal proceedings information (information in correspondence with judicial authorities, information in the case file) follow-up and execution of litigation, follow-up and execution of mediation, follow-up and execution of enforcement proceedings,
• Your other information (transaction date, transaction type, transaction amount, transaction location, transaction method, transaction type) Notification of suspicious transaction to MASAK

purposes, based on the legal reason of being explicitly stipulated in the laws (Art. 5/2-a of the LPPD).

• Your identity information (name, surname, TRKN, date of birth, nationality, parents’ name, place of birth, signature, social media username) registration for the evaluation of new membership, evaluation of corporate account opening requests, opening customer accounts, determining the contact person during account opening, taking action on business processes, creating a request for the customer through the application, confirming the identity of the customer performing the transaction, sending notifications to customers through the application, sending notifications to customers about their transactions via e-mail, sending information messages to customers via SMS, creating a customer database, logging into the system to provide services to customers, invoicing customers, making changes to customer account information, upgrading customer account levels, evaluating customer complaints and requests, evaluating complaints and requests submitted by customers through the call center, evaluating complaints and requests submitted by customers through social media, Contacting banks within the scope of customer support, providing special customer service to VIP customers, confirming the customer who performs the transaction (account confirmation procedures), carrying out internal operational processes, following and executing litigation and execution works, tracking and confirming the transactions carried out by the customer, making money inflows to customer accounts, making money outflows from customer accounts, tracking incoming and outgoing cryptocurrencies to and from customers’ cryptocurrency virtual wallet addresses, organizing contests on social media and sending gifts to the winning contestant, calculating stamp tax on contracts concluded by the company, preventing unauthorized access to customer accounts, routine monitoring of customer accounts for protection purposes, refunding amounts withdrawn from customer accounts in error or deposited in customer accounts in error, evaluating customer requests and complaints from a legal perspective, managing contract processes,
• Your contact information (e-mail address, phone number, address) registration for evaluation of new membership, evaluation of corporate account opening requests, opening customer accounts, determining the contact person during account opening, confirming the identity of the customer who performs transactions, sending notifications to customers via the application, sending notifications to customers about their transactions via e-mail, sending information messages to customers via SMS, obtaining commercial electronic message approval, creating a customer database, logging into the system to provide services to customers, invoicing customers, making changes to customer account information, upgrading customer account levels, evaluating customer complaints and requests, Evaluation of complaints and requests submitted by customers through the call center, evaluation of complaints and requests submitted by customers through social media, provision of special customer service to VIP customers, confirmation of the customer performing the transaction (account approval procedures), execution of internal operational processes, follow-up and confirmation of the transactions performed by the customer, organizing contests on social media and sending gifts to the winning contestant, calculating stamp tax on contracts concluded by the company, preventing unauthorized access to customer accounts, routine monitoring of customer accounts for protection purposes, legal evaluation of customer requests and complaints, managing contract processes,
• Your customer transaction information (customer ID number, information on the invoice) evaluation of corporate account opening requests, opening customer accounts, taking action on business processes, creating a request for the customer through the application, sending an information message to the customer via SMS, creating a customer database, invoicing the customer, invoicing the customer, tracking and confirming the transactions performed by the customer, detection and elimination of user complaints, routine monitoring of customer accounts for protection purposes, legal evaluation of customer requests and complaints,
• Your financial information (account movements, IBAN, account level information, balance information, deposited amount, bank account information, cryptocurrency balance, cryptocurrency virtual wallet address, cryptocurrency account information, cryptocurrency virtual wallet number, asset information, tax office) evaluation of corporate account opening requests, creation of customer database, evaluation of customer complaints and requests, evaluation of complaints and requests submitted by customers through the call center, execution of internal operational processes, follow-up and execution of litigation and enforcement works, tracking and confirming the transactions carried out by the customer, making money inflows to customer accounts, making money outflows from customer accounts, tracking incoming and outgoing cryptocurrencies to and from customers’ cryptocurrency virtual wallet addresses, detection and elimination of user complaints, calculation of stamp tax on contracts concluded by the company, routine monitoring of customer accounts for protection purposes, refunding amounts withdrawn from customer accounts or deposited to customer accounts in error, legal evaluation of customer requests and complaints,
• Your transaction security information (IP address information, device information, website login and exit information, log records) evaluation of corporate account opening requests, sending notifications to customers via the application, creating a customer database, logging into the system to provide services to customers, evaluating customer complaints and requests, evaluating complaints and requests submitted by customers through the call center, conducting internal operational processes, preventing unauthorized access to customer accounts, evaluating customer requests and complaints from a legal perspective,
• Your visual and audio records (identity photo, voice recording) evaluation of corporate account opening requests, confirmation of the identity of the customer performing the transaction, creation of a customer database, making changes to customer account information, upgrading customer account level, evaluation of customer complaints and requests, evaluation of complaints and requests submitted by customers through the call center, confirmation of the customer performing the transaction (account approval procedures), execution of internal operational processes, legal evaluation of customer requests and complaints,
• Your other information (authorization, request content, transaction channel, company representation authority) determination of contact person during account opening, evaluation of complaints and requests submitted by customers through the call center, evaluation of complaints and requests submitted by customers through social media, monitoring and confirmation of transactions carried out by the customer,
• Your location information (location information of your location) evaluation of complaints and requests submitted by customers through the call center

purposes, provided that it is directly related to the establishment or performance of a contract, it is processed based on the legal reason that it is necessary to process personal data belonging to the parties to the contract (Art. 5/2-c of KVKK).

• Your identity information (name, surname, gender, date of birth, Turkish ID number, identity card number, driver’s license number, passport number, residence permit number, place of birth, parents’ name, nationality, signature) to prevent unauthorized access to customer accounts, routine monitoring of customer accounts for protection purposes; returning amounts erroneously withdrawn from customer accounts or erroneously deposited into customer accounts, meeting the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation, reporting suspicious transactions to MASAK, issuing e-ledgers, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions, performing controls during the independent audit process, keeping information on internet usage within the scope of legal obligation,
• Your contact information (phone number, e-mail address, address, fax number) is used to prevent unauthorized access to customer accounts, routine monitoring of customer accounts for protection purposes; meeting the information requests of the prosecutor’s office, police department, gendarmerie and courts regarding customers within the scope of legal obligation, reporting suspicious transactions to MASAK, issuing e-books, performing controls in the independent audit process, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your transaction security information (IP address information, MAC number, log records, device information) to prevent unauthorized access to customer accounts; to meet the information requests of the prosecutor’s office, police department, gendarmerie and courts regarding customers within the scope of legal obligation, to keep information on internet usage within the scope of legal obligation, to identify customer identification and suspicious transactions, to identify and record customers who perform suspicious transactions,
• Your financial information (account movements, IBAN, asset information, bank account information, cryptocurrency address, cryptocurrency balance, tax office) routine monitoring of customer accounts for protection purposes, returning amounts erroneously withdrawn from customer accounts or erroneously deposited into customer accounts; meeting the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation, reporting suspicious transactions to MASAK, performing controls during the independent audit process, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your customer transaction information (customer ID number) routine monitoring of customer accounts for protection purposes, customer identification and detection of suspicious transactions,
• Your visual and audio recordings (identity photo) are used to meet the information requests of the prosecutor’s office, security directorate, gendarmerie and courts regarding customers within the scope of legal obligation; customer identification and detection of suspicious transactions,
• Your professional experience information (occupational information) Reporting suspicious transactions to MASAK, customer identification and detection of suspicious transactions,
• Your other information (transaction date, transaction type, transaction amount, transaction location, transaction method, transaction type) Notification of suspicious transaction to MASAK

purposes, it is processed based on the legal reason that it is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of KVKK).

• Your identity information (name, surname, TRKN, date of birth, signature, passport number, TBB registration number, bar association registration number, driver’s license number, nationality, place of birth, parents’ name), audit of customer transactions, reporting of financial control outputs to senior management, suspicious transaction detection and fraud prevention, contacting event participants, tracking fraud processes, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your contact information (phone number, e-mail address, address) audit of customer transactions, reporting of financial control outputs to senior management, suspicious transaction detection and fraud prevention, contacting event participants, tracking fraud processes, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your financial information (account movements, IBAN, asset information, bank account information, cryptocurrency address, cryptocurrency balance, balance information) audit of customer transactions, reporting of financial control outputs to senior management, suspicious transaction detection and fraud prevention, monitoring of fraud processes, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your customer transaction information (customer ID number), audit of customer transactions, reporting of financial control outputs to senior management, customer identification and detection of suspicious transactions,
• Your transaction security information (IP address information, device information, site membership date) suspicious transaction detection and fraud prevention, tracking fraud processes, customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Your professional experience information (tax certificate, profession) customer identification and detection of suspicious transactions, identification and registration of customers who perform suspicious transactions,
• Visual and audio recordings (ID photo, voice recording, video) suspicious transaction detection and fraud prevention, tracking fraud processes, customer identification and detection of suspicious transactions, identification and recording of customers who perform suspicious transactions,

The use of cookies to target your marketing information (cookie records) or advertising,

• Your marketing transaction security information (IP address information) targeting or advertising cookie use

purposes, it is processed based on the legal reason that data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of the LPPD).

• Your identity information (name, surname) can be used to send newsletters to customers, send information/marketing messages via SMS, contact customers via social media, send information/marketing messages via e-mail,
• Your contact information (phone number, e-mail address) for sending newsletters to customers, sending information/marketing messages via SMS, contacting customers via social media, sending information/marketing messages via e-mail

purposes, based on your explicit consent (Art. 5/1 of KVKK).

• Your biometric data (biometric photo) for customer account level upgrade and confirmation of the customer performing the transaction (account confirmation procedures)

purposes, based on your explicit consent (Art. 6/2 of KVKK).

2. Sharing Your Personal Data with Third Parties

Unless otherwise stipulated in the KVK legislation, third parties with whom we share your personal data are obliged to process and protect your personal data within the scope of our contractual relationship and are under the control of Byte Exchange.

2.1. Domestic Transfer

Your personal data mentioned above are transferred in accordance with the purposes and reasons of lawfulness mentioned below:

• Your legal transaction information (information in correspondence with judicial authorities, information in case files), follow-up and execution of legal affairs, legal evaluation of customer requests and complaints

suppliers (external service providers, lawyers) on the basis of the legal reason that it is expressly stipulated in the law (Art. 5/2-a of the LPPD).

• Providing information about your identity information (name, surname, gender, date of birth, place of birth, Turkish ID number, identity card number, driver’s license number, passport number, residence permit number, parents’ name, nationality) to authorized persons, institutions and organizations and carrying out risk management processes,
• Providing your contact information (e-mail address, telephone number, fax number, address) to authorized persons, institutions and organizations, carrying out risk management processes,
• Informing authorized persons, institutions and organizations about your visual and audio record (identity photo),
• Your professional experience knowledge (profession) execution of risk management processes,
• Providing information about your financial information (account movements, bank account information) to authorized persons, institutions and organizations, and carrying out risk management processes,
• Informing authorized persons, institutions and organizations about your process security information (log records),
• Your other information (transaction date, transaction type, transaction amount, transaction location, transaction method, transaction type) Execution of risk management processes

for the purposes of the law (MASAK, Revenue Administration, law enforcement agencies, prosecutor’s office, courts) based on the legal reason that it is explicitly stipulated in the law (Art. 5/2-a of the LPPD).

• Your identity information (name, surname, TRKN, nationality, date of birth, place of birth, parents’ name, signature) follow-up of requests/complaints, execution of information security processes, execution of communication activities, execution of contract processes, execution of finance and accounting affairs, execution of customer relationship management processes, execution of business continuity activities, execution of service after-sales support services, follow-up and execution of legal affairs, legal evaluation of customers’ requests and complaints,
• Your contact information (phone number, e-mail address, address), follow-up of requests/complaints, execution of information security processes, execution of communication activities, execution of contract processes, execution of financial and accounting affairs, execution of customer relationship management processes, execution of business continuity activities, follow-up and execution of legal affairs, legal evaluation of customer requests and complaints,
• Your visual and audio records (voice recording, identity photo) follow-up of requests/complaints, execution of information security processes, execution of customer relationship management processes, execution of business continuity activities,
• Your transaction security information (IP address information, device information) tracking requests/complaints, conducting communication activities, conducting business continuity activities,
• Your financial information (account movements, IBAN, bank account information, balance information, cryptocurrency account information, cryptocurrency address, cryptocurrency address, amount deposited, asset information, cryptocurrency wallet number, cryptocurrency balance, tax office) follow-up of requests/complaints, execution of contract processes, execution of financial and accounting affairs, execution of business continuity activities, execution of service after-sales support services, follow-up and execution of legal affairs, legal evaluation of customers’ requests and complaints,
• Your location information (location information of your location) tracking of requests/complaints,
• Your customer transaction information (customer ID number, invoice-related information), execution of service production and operation processes, execution of financial and accounting affairs, execution of business continuity activities,
• Your legal transaction information (information in correspondence with judicial authorities, information in case files), follow-up and execution of legal affairs, legal evaluation of customer requests and complaints,
• Your other information (request and complaint content, transaction channel) follow-up of requests/complaints, execution of activities to ensure business continuity,

suppliers (external service providers, lawyers, cargo company) on the legal grounds that it is necessary to process personal data belonging to the parties to the contract (Art. 5/2-c of the LPPD), provided that it is directly related to the establishment or performance of a contract for their purposes.

• Your credentials (name, surname, Turkish ID number, date of birth, place of birth, parents’ name) for conducting audit activities, conducting financial and accounting affairs, conducting information security processes, conducting/auditing business activities,
• Your contact details (e-mail address, address) to carry out audit activities,
• Your financial information (tax office, IBAN) conducting audit activities, conducting financial and accounting affairs,
• Your process security information (IP address information, MAC number, log records) execution of information security processes,
• Your audiovisual record (identity photo) execution/supervision of business activities

suppliers (external service providers) based on the legal reason that it is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD).

• Your identity information (name, surname, Turkish ID number, , , driver’s license number, date of birth, parents’ name, nationality, signature) conducting business continuity activities, conducting communication activities, conducting finance and accounting affairs / conducting internal audit activities, conducting risk management processes, conducting internal audit activities,
• Your contact information (e-mail address, phone number, address) conducting business continuity activities, conducting communication activities, conducting financial and accounting affairs/conducting internal audit activities, conducting risk management processes, conducting internal audit activities,
• Carrying out activities to ensure business continuity of your visual and audio recordings (identity photo, video, audio recording), carrying out risk management processes,
• Your financial information (IBAN, account movements, bank account information, cryptocurrency address, cryptocurrency balance, asset information) conducting business continuity activities, conducting financial and accounting affairs/conducting internal audit activities, conducting risk management processes, conducting internal audit activities,
• Your transaction security information (IP address information, device information), execution of business continuity activities, execution of risk management processes,
• Your marketing information (cookie records) to carry out marketing analysis studies,
• Your marketing/transaction security information (IP address information) to conduct marketing analysis studies,
• Your customer transaction information (customer ID number, source of income, education status) conducting financial and accounting affairs / conducting internal audit activities, conducting risk management processes, conducting internal audit activities,
• Your professional experience knowledge (profession) execution of risk management processes

suppliers (external service providers) based on the legal reason that data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of the LPPD).

• Your identity information (name, surname) execution of advertising/campaign/promotion processes,
• Your contact information (phone number, e-mail address) execution of advertising/campaign/promotion processes

to suppliers (external service providers) based on your explicit consent (Art. 5/1 of the LPPD).

• Execution of information security processes of your biometric data (biometric photograph), execution of customer relationship management processes,

suppliers (external service providers) based on your explicit consent (Art. 6/2 of the LPPD).

• Your identity information (name, surname, TRKN, parents’ name, nationality, place of birth, date of birth) to carry out business continuity activities, carry out business activities, carry out information security processes, carry out contract processes and follow up requests/complaints,
• Your contact information (phone number, e-mail address, address), conducting business continuity activities, conducting business activities, conducting information security processes, conducting contract processes,
• Your customer transaction information (customer ID number) to carry out activities to ensure business continuity, to carry out service production and operation processes,
• Your financial information (account movements, IBAN, asset information, bank account information, cryptocurrency balance, balance information, cryptocurrency address, tax office), execution of business continuity activities and execution of contract processes,
• Your transaction security information (IP address information, device information, log records), conducting business continuity activities, conducting business activities, conducting information security processes,
• Carrying out activities to ensure business continuity of your audiovisual records (identity photo)

real persons or private legal entities (bank, national database system) on the legal grounds that it is necessary to process the personal data of the parties to the contract (Art. 5/2-c of the LPPD), provided that it is directly related to the execution or performance of a contract for the purposes of the execution or performance of a contract.

• Carrying out information security processes for your identity information (name, surname, TRKN, parents’ name, nationality),
• Execution of information security processes for your contact information (phone number, e-mail address, address),
• Execution of information security processes for your customer transaction information (customer ID number),
• Carrying out information security processes for your financial information (account movements, IBAN, asset information),
• Your transaction security information (IP address information, device information) execution of information security processes,

natural persons or private legal entities (bank, national database system) for the purposes of fulfilling the legal obligation of the data controller (Art. 5/2-ç of the LPPD).

• Your identity information (name, surname, TRKN, date of birth, place of birth, parents’ name, signature, driver’s license number, passport number, bar association registration number, TBB registration number, nationality) to carry out risk management processes,
• Your contact information (phone number, e-mail address) to carry out risk management processes,
• Execution of risk management processes for your customer transaction information (customer ID number),
• Execution of risk management processes for your financial information (account movements, IBAN, bank account information, balance information, cryptocurrency balance, cryptocurrency address),
• Execution of risk management processes for your transaction security information (IP address information, device information),
• Carrying out risk management processes for your audiovisual records (identity photo)

natural persons or private legal entities (bank, national database system) based on the legal reason that data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of the LPPD).

• Your credentials (name, surname, TRKN, date of birth, place of birth, parents’ name, signature) to fulfill customer relationship management or communication processes,
• Your contact details (phone number, e-mail address) for customer relationship management or fulfillment of communication processes,
• Your audiovisual recordings (identity photo) fulfill customer relationship management or communication processes

to authorized public institutions and organizations (MASAK, Revenue Administration, law enforcement agencies, prosecutor’s office, courts) based on the legal reason that it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract (Art. 5/2-c of KVKK).

• Your identity information (name, surname, gender, date of birth, Turkish ID number, identity card number, driver’s license number, passport number, residence permit number, place of birth, mother’s and father’s name, nationality, signature), conducting risk management processes, informing authorized persons, institutions and organizations, monitoring and conducting legal affairs,
• Your contact information (phone number, e-mail address, address, fax number) to carry out risk management processes, to provide information to authorized persons, institutions and organizations, to follow up and carry out legal affairs,
• Your financial information (bank account information, account movements, asset information) execution of risk management processes, informing authorized persons, institutions and organizations, follow-up and execution of legal affairs,
• Informing authorized persons, institutions and organizations about your visual and audio records (identity photo),
• Informing authorized persons, institutions and organizations about your process security information (log records),
• Your professional experience knowledge (profession) execution of risk management processes,
• Your legal transaction information (information in correspondence with judicial authorities, information in the case file), follow-up and execution of legal affairs,
• Execution of other (transaction date, transaction type, transaction amount, transaction location, transaction method, transaction type) risk management processes

to authorized public institutions and organizations (MASAK, Revenue Administration, law enforcement agencies, prosecutor’s office, courts) based on the legal reason that the data controller fulfills its legal obligation (Art. 5/2-ç of KVKK).

• Your identity information (Name, surname, Turkish ID Number, date of birth) to carry out after-sales support services, to carry out business continuity activities, to carry out financial and accounting affairs,
• Your contact information (e-mail address, phone number) to carry out business continuity activities,
• Your financial information (account movements, IBAN, deposited amount, asset information, bank account information, cryptocurrency account information, cryptocurrency wallet number, cryptocurrency balance) to carry out business continuity activities, to carry out financial and accounting affairs and to carry out after-sales support services,
• Carrying out activities to ensure business continuity of your customer transaction information (customer ID number),
• Your other information (transaction channel) Conducting business continuity activities

For the purposes of the processing of personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, it is transferred to our business partners (bank, solution partner) based on the legal reason that it is necessary to process personal data belonging to the parties to the contract (Art. 5/2-c of KVKK).

• Your credentials (name, surname, Turkish ID number) for the evaluation of new customerships,
• Your contact information (e-mail address, phone number) for the evaluation of new customerships

for the purposes of the legitimate interests of the data controller based on the legal reason that data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of the LPPD), and is transferred to our business partners (bank, solution partner).

• Your credentials (name, surname, Turkish ID Number) to carry out financial and accounting affairs,
• Your financial information (IBAN, account movements) execution of financial and accounting affairs

For the purposes of fulfillment of the legal obligation of the data controller (Art. 5/2-ç of KVKK), it is transferred to our business partners (bank, solution partner) based on the legal reason.

2.2. Transfer Abroad

Again, your personal data mentioned above are transferred to foreign suppliers (external service providers providing infrastructure and information system services) for the purpose of realizing the Company’s activities and in connection with the aforementioned purposes, in a measured and limited manner, in case you give your explicit consent, since foreign data transfer is necessary for the execution of these activities due to the functioning of the infrastructure and information systems used by Byte Exchange.

3. Protection, Preservation and Destruction of Your Personal Data

Our Company takes all necessary technical and administrative measures in accordance with the PDP legislation in order to prevent access to your personal data by unauthorized persons, incorrect processing, disclosure, alteration/deletion of your personal data for unlawful reasons, and to ensure its protection and security.

Your personal data will be kept for 10 years from the expiration date of the contract in cases where a contract has been signed between us. Your personal data processed outside the contractual relationship will be processed for reasonable periods required by the purpose of processing. However, in any case, we would like to underline that if there are retention periods stipulated by legal regulations regarding the retention of your personal data within the scope of the relevant processing process, your data cannot be deleted during these periods.

Your personal data shall be deleted, destroyed or anonymized in accordance with the KVK legislation in line with our Company’s Personal Data Protection and Privacy Procedure and Personal Data Storage and Destruction Procedures in the event that the period stipulated in the relevant legal regulation or required for the purpose for which it is processed expires or your deletion requests are concluded positively.

In the event that your personal data is damaged and/or seized/disclosed by third parties as a result of attacks on Byte Exchange’s physical archive and/or servers and/or other systems, our Company will inform you and the PDP Board within 72 hours after being informed of the situation in question.

4. Your Right to Information

11. Within the scope of the article, by applying to our Company, your personal data (i) find out whether it is being processed (ii) if processed, to request information about it (iii) to learn the purpose of processing and whether it is used for its intended purpose (iv) to which it is transferred domestically or abroad. knowing people (v) request correction if incomplete or incorrectly processed (vi) 7. to request its deletion or destruction under the conditions stipulated in the article (vii) your personal data will be processed in accordance with Article 7 of the KVKK. To request that third parties to whom personal data are transferred be notified of requests for deletion and destruction and correction of incomplete or incorrectly processed personal data within the scope of the article (viii) object to the occurrence of a result to your detriment due to analysis exclusively by automated systems (ix) in case you suffer damage due to unlawful processing, we inform you that you have the right to demand compensation for the damage.

Within the scope of KVKK, if you wish to make an application regarding your personal data, you can submit your application through one of the following channels

• Barbaros Mahallesi 5301/2 SK. No:4 A :BLOK D:179 BORNOVA-IZMIR address in person or through a notary public or in writing by providing your identity confirmation or
• to our Company’s [email protected] address via registered electronic mail (KEP) address, secure electronic signature, mobile signature or by using your e-mail address previously notified to Byte Exchange by you and registered in Byte Exchange’s system

In accordance with Article 13 of the KVKK and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller published in the Official Gazette dated 10.03.2018 and numbered 30356.

Our Company will finalize the duly made application requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, the tariff determined by the PDP Board will be applied. Your request may be accepted or rejected with an explanation of the reasons, and our response will be sent to you in writing or electronically.

This Clarification Text may be updated in order to adapt to changing conditions and legal regulations. Updates to be made by our company will be notified to you, our customers.