As Tres Teknoloji A.Ş., we regard the protection of personal data as a fundamental responsibility. This policy governs the procedures and principles of the personal data processing activities that we carry out in our capacity as data controller, within the scope of Law No. 6698 (KVKK / Personal Data Protection Law) and the relevant secondary legislation.
The purpose of this policy is to ensure that personal data processed by Tres Teknoloji A.Ş. is processed, stored and destroyed in accordance with the law. The policy covers the personal data of customers, job candidates, suppliers, visitors and website users.
The data controller is Tres Teknoloji A.Ş., located at Atatürk Mh. Ertuğrul Gazi Sk. No: 2E/331 Ataşehir / İSTANBUL, registered with the Kozyatağı Tax Office under tax number 8591277092 and Mersis number 0859127709200001. Our Company is registered with the Data Controllers Registry Information System (VERBİS).
The following categories of data are processed in connection with our activities:
Personal data is processed on the legal grounds of the establishment and performance of a contract, the fulfillment of legal obligations, the establishment and protection of a right, and the legitimate interests of the data controller. In cases requiring explicit consent, consent is additionally obtained.
Personal data is retained for the period required by the purpose of processing and in observance of the minimum retention periods prescribed by the relevant legislation. Traffic records under Law No. 5651 are retained for two years, and commercial books and documents for ten years. Upon expiry of the period, the data is erased, destroyed or anonymized during the periodic destruction cycle.
Our Company implements administrative and technical measures within the scope of the ISO/IEC 27001 Information Security Management System. These measures include an access authorization matrix, multi-factor authentication, end-to-end encryption, centralized log management, regular penetration tests and staff awareness training.
Pursuant to Article 11 of the Law, data subjects have the rights to learn whether their personal data is being processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with its purpose, to request its correction or erasure, to know the third parties to whom it has been transferred, and to request compensation for damage.
This English text is an unofficial translation provided for information purposes only. In case of any discrepancy, the Turkish (Türkçe) version prevails and is the sole legally binding text.