Legal
KVKK Disclosure Statement
Your rights, our data processing policy and application channels under the Law on the Protection of Personal Data (No. 6698) and the GDPR.
Data Controller
Company
CMR Sistemi
Field of Activity
CMR document management system and logistics software services
Contact
Purposes of Data Processing
- Service provision and customer satisfaction
- Fulfilling legal obligations
- Security and fraud prevention
- Statistics and analysis work
- Marketing and communication activities
- Management of legal disputes
Our Data Processing Principles
The five core principles we adopt under Article 4 of the KVKK.
Lawfulness
Personal data is processed on a legal basis and in a fair manner.
Relevant to the Purpose, Proportionate
Data is collected for specific, explicit and legitimate purposes.
Accurate and Up to Date
Data is kept accurate and, where necessary, up to date.
Storage for a Specific Period
Data is stored only for as long as necessary.
Secure Processing
Data is protected with industry standards.
Your Rights as a Data Subject
The rights you have under Article 11 of the KVKK.
Right to Be Informed
Your right to learn whether your personal data is being processed.
- Purposes of data processing
- Data categories
- Data recipients
- Retention periods
Right of Access
Your right to access your processed personal data.
- Obtaining a copy of your data
- Data processing details
- Information on the source of the data
- Data transfer information
Right to Rectification
Your right to correct your inaccurate or incomplete data.
- Correcting incorrect information
- Completing missing information
- Request for updating
- Notification to third parties
Right to Erasure
Your right to request the deletion of your data under certain conditions.
- Expiry of the legal period
- End of the purpose of processing
- Unlawful processing
- Exercise of the right to object
Restriction of Processing
Your right to stop data processing in certain situations.
- Objection to data accuracy
- Unlawful processing
- The data subject's need
- Exercise of the right to object
Data Portability
Your right to transfer your data to another service provider.
- Structured data format
- Machine-readable format
- Direct transfer
- Personal use
Application Process
Three simple steps to follow to exercise your rights.
Prepare Your Request
State which right you want to exercise. Include the information that verifies your identity.
Send It to Us
Use whichever of the email, KEP or written application methods is suitable.
Receive a Response
Your application is reviewed and answered within 30 days. It is free of charge.
Application Methods
- Written application (wet signature)
- Secure electronic application via KEP
- Through the email address registered in the system
- Application form through the platform
Your applications are concluded and reported to you within 30 days at the latest under Article 13 of the KVKK.
Our Data Security Measures
The technical and administrative measures we take to protect your data.
Technical Measures
- TLS 1.3 encryption protocol
- Data masking and anonymization
- Regular security tests
- Backup and disaster recovery
- Role-based access control
Administrative Measures
- Staff KVKK training programs
- Confidentiality undertakings
- Regular risk assessments
- Data processing records (VERBİS)
- Third-party contract auditing