Privacy Notice (KVKK) | NSS Teknoloji

1. Data controller

The data controller is NSS Teknoloji.

Address: Girne Mah. Dörtel Çıkmazı Sk. Satıroğlu İş Merkezi No:1A/5, Maltepe / İstanbul. Telephone: +90 216 339 97 71.

2. Categories of personal data

Identity: first and last name.
Contact: e-mail address and, if you provide it, telephone number.
Company and title: your organisation and job title.
Form content: what you write in the message or application fields.
Compliance Compass answers: the sector, organisation profile and control status you selected (only if you request a report).
Technical context: the page address you submitted the form from, language, referring site and campaign (UTM) parameters.

3. Purposes of processing

Answering your requests and questions and contacting you.
Preparing a demo, quotation or discovery meeting for our products and solutions.
Evaluating reseller and partner applications and project registrations.
Preparing and delivering the Compliance Compass report you requested.
Measuring the quality of our service and the effectiveness of our channels.

4. Legal bases

Your data is processed to answer your request, quotation or application on the basis of Article 5(2)(c) of KVKK (it is directly related to the establishment or performance of a contract) and Article 5(2)(f) (the controller’s legitimate interest, such as managing requests and measuring service quality). Explicit consent is not required for this processing, and handling your request does not depend on giving consent.

Explicit consent is optional and is requested only for sending commercial electronic messages and information about our products, events and campaigns, through a separate box on the form. You may withdraw it at any time without giving a reason; withdrawal does not affect the lawfulness of processing carried out before it.

5. How data is collected

Your data is collected electronically through the forms on our website and sent directly from your browser to our customer relationship management (CRM) system. The infrastructure hosting our website neither processes nor stores this data. Our site does not use cookies; measurement is cookieless and collects no personal data.

6. Transfers

Your data is kept in our CRM system hosted in Türkiye and is viewed only by employees responsible for answering the request. If a brand or partner needs to work with you in a project or application, such a transfer is made only after you are separately informed and in accordance with the applicable legislation.

Your data is not transferred abroad.

7. Retention

Your data is kept for as long as the purpose requires and for at most 2 years from the last activity on your request. Afterwards it is deleted, destroyed or anonymised. Where a legal retention obligation applies, the period required by that obligation is observed.

8. Your rights (KVKK Article 11)

As a data subject you have the right to:

learn whether your personal data is processed and request information about it;
learn the purpose of processing and whether it is used accordingly;
know the third parties to whom data is transferred, in Türkiye or abroad;
request correction of incomplete or inaccurate data;
request deletion or destruction of data under the conditions set out in the law, and request that these actions be notified to third parties to whom data was transferred;
object to a result against you arising from analysis of the data exclusively by automated systems;
claim compensation for damage caused by unlawful processing.

9. How to apply

You can send requests about your rights as a signed written petition stating your identity and the request to Girne Mah. Dörtel Çıkmazı Sk. Satıroğlu İş Merkezi No:1A/5, Maltepe / İstanbul, or call +90 216 339 97 71 to learn how to apply. You may also apply through the form on our contact page.

Your application is concluded free of charge within thirty days at the latest, depending on the nature of the request. If the action requires a separate cost, the tariff set by the Personal Data Protection Board may apply.