Privacy Policy

1. Collection of Personal Data, Processed Data and Purpose

1.1. Collection

Your personal data is obtained automatically or non-automatically, verbally, in writing or electronically:

• By sending an e-mail, making a phone call, filling out forms on the Internet site, or contacting us through social media platforms.
• Through business card exchanges at fairs or seminars.
• Through forms/documents/notes filled out or arranged by you.

The terms regulating your use of the Internet site are defined in the Terms of Use. Additionally, your personal data is collected directly from you during your communication with Metaverse. Personal data is stored on servers of third parties from whom Metaverse receives services.

1.2. Processed Personal Data and Purpose

In accordance with KVKK and other relevant legislation, your personal data in identity, contact, financial information, physical location security, legal process, customer transaction and transaction security data categories is processed for the purposes and legal grounds set out in this Privacy Policy.

Your personal data is processed for the following purposes:

• Carrying out communication activities,
• Carrying out storage and archiving activities,
• Carrying out business continuity activities,
• Carrying out contract processes,
• Carrying out the necessary work by our business units so that you can benefit from the products and services offered by our company,
• Ensuring the legal, technical and commercial job security of relevant persons within the business relationship,
• Following up finance and/or accounting transactions, including invoicing, legal affairs, planning and executing corporate communication activities,
• Carrying out goods and service sales processes,
• Carrying out logistics activities within the scope of goods and service sales processes,
• Carrying out advertising/campaign/promotion processes,
• Receiving and evaluating suggestions for improving business processes,
• Carrying out customer relationship management processes,
• Carrying out activities aimed at customer satisfaction.

1.3. Legal Grounds for Processing

Data processing is based on the explicitly stipulated reasons in laws under paragraph (a), the necessity for the establishment or performance of a contract under paragraph (c), the necessity for compliance with a legal obligation to which Metaverse is subject as data controller under paragraph (ç), and the necessity for the establishment, exercise or protection of a right under paragraph (e) of Article 5/2 of KVKK, within the scope of purchasing services through the Platforms and benefiting from customer services and support.

The processing of this data is not subject to your consent. Therefore, you do not have the right to request deletion or destruction of your personal data until the end of the retention periods required by the service and the law.

2. Transfer of Personal Data to Third Parties

Metaverse may transfer your personal data listed above without requiring your consent, when necessary to comply with obligations arising from the law and/or to fulfil its responsibilities under the service contract and/or to comply with its legal obligation:

• To banks, audit firms, lawyers, law offices and financial advisors, suppliers such as psychologists whose services are received, limited to and proportionate with the service received for fulfilling obligations, and
• To law enforcement units, public institutions, relevant ministries and directorates; to public institutions and legal entities such as the Social Security Institution appointed under labour and social security legislation; and to other public authorities authorised by law.

Data transfers within Türkiye are limited to cases required by law under Article 5/2(a) of KVKK, necessary for the establishment and/or performance of a contract under (c), necessary for compliance with a legal obligation under (ç), and necessary for the establishment, exercise or protection of a right under (e) of Article 8/2 of KVKK.

The data controller regarding personal data you share in your communication with service providers is the relevant service provider. Similarly, transactions you carry out outside Metaverse channels during the provision of the service (for example, payment transactions) and records relating to the provision of the service are part of the legal relationship between the service provider and the recipient. Metaverse does not act as a data controller for data processed and stored in this context.

Information about the third parties to whom and/or categories of third parties to whom your data is disclosed in Türkiye is always open to your information and review.

3. Access to Personal Data

Metaverse stores the personal data obtained within the scope of the Internet Site on servers located in Türkiye belonging to Natro. These transfers are carried out in accordance with Article 8/2 of KVKK.

4. Protection, Retention Period and Destruction of Personal Data

Metaverse is obliged to take all kinds of physical, technical and administrative measures to ensure the security level necessary to prevent unlawful processing of and unlawful access to personal data, and to ensure their retention, and takes these measures to the maximum extent.

Your personal data are retained for 10 (ten) years from the date the service relationship ends, unless otherwise stated in the Data Protection Notice. For detailed information, please refer to the Data Protection Notice.

Processing of your personal data for marketing purposes is limited to the service period. At the end of the service period, Metaverse will not use your personal data to contact you for marketing purposes.

Metaverse has prepared separate special information notices (“Data Protection Notice”) for users, employees, employee candidates, suppliers and managers. These notices have been delivered or access has been granted to each relevant person group. At the end of these periods, your personal data will be deleted, destroyed or anonymised in the first destruction period.

5. Your Rights

As a data subject, under applicable legislation you have the right to (a) learn whether your personal data is processed and how (Art. 11/(a), (b)), (b) learn the purpose of processing and whether it is used in accordance with that purpose (Art. 11/c), (c) know the third parties to whom it is transferred (Art. 11/ç), (d) request correction (Art. 11/d), (e) request deletion when the reasons for processing disappear (Art. 7, Art. 11/e), (f) request notification to third parties of correction or deletion (Art. 11/f), (g) object to results arising from automated analysis (Art. 11/g), (h) request restriction of processing (Art. 7), and (ı) claim compensation for damages arising from unlawful processing (Art. 11/ğ).

The rights mentioned above are limited by law and may be provided by us only under certain conditions. (Please especially review Articles 10 and 13 of KVKK.)

You may send these requests to kvkk@metaverse.com.tr. Metaverse will finalise your request as soon as possible and within 30 (thirty) days at the latest from the receipt of the relevant documents.

Data Controller: Metaverse Software Informatics Trade Ltd.Address: METU Technopolis, İkizler Building K1-4A Çankaya/Ankara, TürkiyeE-Mail: kvkk@metaverse.com.tr

Right to Complain to the Personal Data Protection Board

To exercise your right to complain to the Board (KVKK Articles 13, 14, 15):

Board: Personal Data Protection BoardAddress: Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No: 4 06520 Balgat-Çankaya/Ankara, TürkiyePhone: +90 312 216 5000Website: http://www.kvkk.gov.tr/