THAAT’S IT
PRIVACY NOTICE

This Privacy Notice has been prepared to inform you about the collection, processing, and transfer of your personal data, as well as your rights under the Law on the Protection of Personal Data No. 6698 (“KVKK”).

Esentepe Neighborhood As Thaat’s It Education Consulting and Advertising Limited Company (“the Company” or “Thaat’s It”), located at Büyükdere Ave., Levent 199 Block No. 199/6, Şişli, Istanbul, we process your personal data in our capacity as the data controller in accordance with the Personal Data Protection Law (KVKK) and relevant legislation, within the scope described below.

Personal Data We Process

In order to fulfill the purposes of personal data processing set forth in this Privacy Notice, we may process the following personal data:

• Your personal information, including your first name, last name, and Turkish ID number;
• Your contact information, including your email address, phone number, and social media accounts;
• Your location information, including your residential address, state, city, and ZIP code;
• Your visual content, including images and photos available on the website;
• Your educational background and professional experience;
• Your customer transaction information, including request and complaint details;
• Your marketing information, including cookie records.

Our Purposes for Processing Your Personal Data

We process your personal data solely for the following purposes:

• Conducting the necessary work, training, and consulting activities to enable third-party individuals and/or legal entities associated with our Company to benefit from the products and services of our Company and/or its affiliated units,
• To conduct market research, campaigns, and promotional activities related to our services; to provide necessary information; to evaluate complaints and suggestions; and to contact you directly through the communication channels shared with our Company,
• Contacting our research participants, conducting our research activities,
• Improving the website experience,
• The execution of contract processes,
• The fulfillment of our obligations under the contract,
• Facilitating purchases and interactions,
• Customizing and improving our products and services in line with your needs and requests,
• To resolve issues with our products and services, identify errors, problems, and bugs, fix them, and provide our users with a better experience,
• The execution of customer relationship processes,
• Providing customer support services,
• Managing cookies on our websites to improve our visitors’ experience, identify requests and issues, and provide quick search results. (For more information, please see our Cookie Policy.)
• In order to continue conducting our business operations, we need to update your contact information,
• The sending of commercial electronic messages,
• Processing refunds for those who have made incorrect payments,
• Planning social media communication processes,
• Conducting marketing activities by displaying ads across various platforms, managing advertising, campaign, and promotional processes,
• To keep you informed about our new products or services, changes to our existing products or services, and our campaigns and promotions,
• Sending an e-newsletter,
• Providing the necessary information to individuals who request it through our website,
• The management, execution, and oversight of our business operations; the implementation of business continuity measures;
• Handling financial and accounting matters.
• Ensuring the security of our software and systems and implementing information security processes,
• The conduct of management activities,
• Ensuring compliance with legal regulations and fulfilling our legal obligations.

How We Collect Your Personal Data

We collect your personal data through the automated and non-automated channels listed below:

• Directly from you via email, phone, website, printed forms, and other physical and electronic channels,
• From our own records regarding how you use our services,
• Through other physical and electronic media,
• From social media and career platforms.

Our Legal Grounds for Processing

Your personal data may be processed: if it is expressly provided for by the laws specified in Article 5 of the Personal Data Protection Law (KVKK), it is necessary for the establishment and performance of the contract between you and the Company; it is mandatory for the Company to fulfill its legal obligations; it is mandatory for the Company to establish, defend, and protect its rights; it is mandatory for the Company to pursue its legitimate interests; and your explicit consent has been obtained.

Your special category personal data is processed based on the legal grounds of the data subject’s explicit consent, as specified in Article 6 of the Personal Data Protection Law (KVKK), and as provided for by law.

Transfer of Your Personal Data

Based on the legal grounds specified in Articles 8 and 9 of the KVKK, certain personal data about you may be processed, including for the purposes stated above;

• To our business partners and suppliers both in Turkey and abroad,
• To our shareholders,
• To fulfill our legal obligations, to respond to requests for information and audits from judicial or administrative authorities, and to take the necessary legal action in the event of any disputes, we may disclose information to authorized public institutions and organizations, as well as to legally authorized private individuals;

can be transferred.

Thaat’s It will never sell your data to a third party.

We reserve the right to disclose any personal data obtained from you or about you to third parties to the extent necessary for the process in connection with a merger, acquisition, bankruptcy, or liquidation of all or a substantial portion of our assets.

We would like to note that we transfer your personal data only if the party to whom the data is to be transferred accepts our data transfer agreement, which ensures a level of protection in accordance with data protection legislation.

Your Rights Regarding Your Personal Data

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:

• To find out whether your personal data is being processed,
• If your personal data has been processed, you have the right to request information regarding this,
• The right to learn the purpose of the processing of personal data and whether such data is being used in accordance with that purpose,
• The right to know which third parties, whether within the country or abroad, your personal data has been transferred to,
• If your personal data has been processed incompletely or incorrectly, you have the right to request that it be corrected and, in this context, to request that the third parties to whom your personal data has been disclosed be notified of the correction,
• Although your personal data has been processed in accordance with the Personal Data Protection Law No. 6698 and the provisions of other relevant laws, you have the right to request the erasure or destruction of your personal data if the grounds for its processing no longer exist, and to request that third parties to whom your personal data has been transferred be notified of this action,
  
• To object to a decision made solely through the automated processing of your personal data that adversely affects you,
• If you suffer damage as a result of the unlawful processing of your personal data, you have the right to request compensation for such damage.

You may submit requests regarding these rights through the Data Subject Request Form on our website. Your request will be processed free of charge. However, if the requested action incurs an additional cost, the applicant will be charged the fees set forth in the tariff established by the Personal Data Protection Board.