This English text is a courtesy translation of the Turkish notice prepared under KVKK. If the two versions differ, the Turkish version prevails.
01Data controller
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the data controller for personal data processed through the www.palovoca.com website (the “Site”) is Extreamsoft (the “Company”). This notice has been prepared to inform you under Article 10 of KVKK and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.
- Data controller
- Extreamsoft
- info@extreamsoft.com
- Website
- www.palovoca.com
02Personal data processed
| Category | Data | How it is collected |
|---|---|---|
| Identity | First and last name | Contact form or email |
| Contact | Email address, phone number | Contact form or email |
| Customer transaction | Company name, request topic, number of agents, message content | Contact form or email |
| Transaction security | IP address, browser and device information, access time and request logs | Automatically by the hosting infrastructure on every visit to the Site |
| Site usage | Pages viewed, buttons clicked, session duration, approximate location (city and country), device type, cookie identifiers | Through Google Analytics; cookie identifiers only if you consent |
The contact form does not store your information on the Site. It opens a pre-filled email in your own email app, and your information reaches the Company only when you send that email.
03Purposes of processing
- Responding to your demo, information, quotation and support requests
- Conducting pre-contract discussions about the product, licensing and deployment
- Keeping the Site secure, preventing misuse and resolving technical issues
- Measuring how the Site is used and improving its content, if you consent
- Fulfilling legal obligations and responding to requests from authorized bodies
04Legal basis and method of collection
Your personal data is collected directly from you through the contact form and email, and partly by automated means through cookies and server logs while you visit the Site. It is processed on the following legal grounds:
- KVKK Art. 5(2)(c): For demo, quotation and licensing requests, processing is directly related to the conclusion or performance of a contract.
- KVKK Art. 5(2)(f): The Company’s legitimate interest in responding to your requests and keeping the Site secure, provided this does not harm your fundamental rights and freedoms.
- KVKK Art. 5(2)(ç): Compliance with the Company’s legal obligations.
- KVKK Art. 5(1): Your explicit consent for analytics cookies. You give consent through the cookie banner and can withdraw it at any time.
05Transfer of personal data
Your personal data may be transferred to the following recipient groups, limited to the purposes above:
- Hosting: The Site is hosted on Vercel Inc. infrastructure. Transaction security data is processed on this service’s servers.
- Analytics: Site usage data is processed through Google Analytics by Google Ireland Limited and its affiliate Google LLC.
- Email: Your requests are stored on the servers of the email service provider used by the Company.
- Authorized bodies: Authorized public institutions and organizations, where required by law.
Because some Vercel and Google servers are located outside Türkiye, transfers within these services qualify as transfers abroad and are carried out in accordance with the conditions set out in Article 9 of KVKK.
06Retention period
Your personal data is kept for as long as the purpose of processing requires and as provided by applicable law. When that period ends, it is deleted, destroyed or anonymized. Google Analytics data is kept for the retention period set in the Analytics account, up to a maximum of 14 months.
08Your rights under KVKK
Under Article 11 of KVKK, you have the right to apply to the Company to:
- learn whether your personal data is processed,
- request information about the processing if your data has been processed,
- learn the purpose of processing and whether your data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your data is transferred,
- request correction if your data is incomplete or inaccurate,
- request deletion or destruction of your data under the conditions in Article 7 of KVKK,
- request that any correction, deletion or destruction be notified to the third parties to whom your data was transferred,
- object to a result against you arising from the analysis of your data exclusively through automated systems,
- claim compensation if you suffer damage because your data was processed unlawfully.
09How to apply
You can submit requests regarding your rights to info@extreamsoft.com in writing, or by registered electronic mail (KEP), secure electronic signature, mobile signature, or from an email address you have previously provided to the Company and that is registered in its systems, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.
Your application must include your first and last name, your signature for written applications, your Turkish ID number (or nationality and passport or ID number for foreign nationals), your address for notifications, your email address and phone number if any, and the subject of your request.
Your application will be concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, the response is insufficient or no response is given in time, you may file a complaint with the Board under Article 14 of KVKK.