Privacy Policy
M Global Yazılım Teknoloji Sanayi ve Ticaret Limited Şirketi
Last Updated: 2025
1. General Provisions and Definitions
This Privacy Policy ("Policy") regulates the procedures and principles regarding the processing of personal data collected, processed, stored and protected through the mdijital.io website ("Site") and related digital services ("Services") operated by M Global Yazılım Teknoloji Sanayi ve Ticaret Limited Şirketi ("Company", "Data Controller", "we", "us") in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK") and related legislation. This Policy applies to all natural persons ("Data Subject", "User", "you", "your") who visit the Site, use our Services or contact us. By using the Site or benefiting from our Services, you are deemed to have accepted the processing of your data in accordance with this Policy. If you do not accept these terms, please do not use the Site and do not benefit from our Services.
2. Data Controller and Contact Information
M Global Yazılım Teknoloji Sanayi ve Ticaret Limited Şirketi, which has the status of Data Controller under KVKK, is responsible for the processing of your personal data. Company contact information: Email: info@mdijital.com, Phone: +90 555 123 45 67, Address: Istanbul, Turkey. You can use the above contact channels for any requests, applications and complaints regarding the processing of your personal data. Applications within the scope of KVKK can be made in writing or using registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address you have previously notified to the Company and registered in our system, in accordance with Article 13 of KVKK.
3. Personal Data Collected and Collection Methods
The Company may collect your personal data in the following categories for the purpose of providing, developing our Services and fulfilling our legal obligations: Identity Information: Name, surname, date of birth, T.R. identity number (in case of legal obligation), passport information. Contact Information: Email address, phone number, address information, social media account information. Customer Transaction Information: Order information, invoice information, payment information, contract information, project details, request and complaint records. Transaction Security Information: IP address, log records, cookie information, device information, browser information, operating system information. Marketing Information: Cookie IDs, advertising IDs, marketing preferences, subscription information. Your personal data may be collected through forms you fill out on the Site, messages you send via email, phone calls, social media interactions, cookies and similar technologies, automatic collection methods and third-party sources.
4. Purposes and Legal Grounds for Processing Personal Data
In accordance with Articles 5 and 6 of KVKK, your personal data is processed for the following purposes and based on legal grounds: Provision of Services: To provide our Services, fulfill contracts, manage customer relationships (Legal Ground: Establishment or performance of contract, KVKK Art.5/2-c). Fulfillment of Legal Obligations: Compliance with tax legislation, commercial law, labor law and other legislation provisions (Legal Ground: Fulfillment of legal obligation, KVKK Art.5/2-e). Legitimate Interests: Business development, marketing activities, customer satisfaction analyses, security measures (Legal Ground: Legitimate interest, KVKK Art.5/2-f). Explicit Consent: Marketing communications, cookie usage, data processing for analytical purposes (Legal Ground: Explicit consent, KVKK Art.5/2-a). Your personal data is not used or processed for purposes other than those stated above.
5. Transfer of Personal Data
In accordance with Articles 8 and 9 of KVKK, your personal data may be transferred to third parties in Turkey and abroad in the following cases: Service Providers: Hosting service providers, cloud storage services, email service providers, payment processor service providers, analytics service providers (Google Analytics, etc.). Business Partners: Project development partners, consulting service providers, marketing agencies. Legal Obligations: Courts, prosecutors, law enforcement, tax offices and other public institutions and organizations. In case of transfer abroad, transfer is made to countries with adequate protection or with contracts providing adequate protection in accordance with Article 9 of KVKK. Transferred data is used only for the stated purposes and security measures are taken.
6. Retention Periods of Personal Data
In accordance with Article 7 of KVKK, your personal data is retained for the period required by the processing purpose and in accordance with legal retention periods. When the processing purpose ceases to exist or the legal retention period expires, your personal data is deleted, destroyed or anonymized in accordance with Article 7 of KVKK. In general: Contract information: Contract period + 10 years (Turkish Commercial Code), Invoice and accounting records: 10 years (Tax Procedure Law), Communication records: 2 years, Marketing consents: Until cancelled, Cookie data: Variable according to cookie type (session cookies: until end of session, persistent cookies: maximum 2 years).
7. Data Security and Technical-Administrative Measures
In accordance with Article 12 of KVKK, the following technical and administrative measures are taken to ensure the security of your personal data: Technical Measures: SSL/TLS encryption protocols, secure data transmission, encrypted data storage, access control systems, firewalls, attack detection systems, regular security updates, backup systems, data loss prevention systems. Administrative Measures: Staff training, confidentiality agreements, access authorization procedures, regular security audits, data breach response plans, security policies and procedures. However, you acknowledge that data transmission over the internet is not 100% secure and no security system can provide absolute security. In case of data breach, notification is made to the Personal Data Protection Board within 72 hours at the latest in accordance with Article 12 of KVKK, and Data Subjects are informed as quickly as possible.
8. Rights of Data Subject
In accordance with Article 11 of KVKK, you have the following rights regarding your personal data: To learn whether your personal data is being processed, To request information if it has been processed, To learn the purpose of processing and whether it is used in accordance with its purpose, To know the third parties to whom personal data is transferred domestically or abroad, To request correction if processed incompletely or inaccurately, To request deletion or destruction within the framework of the conditions set forth in Article 7 of KVKK, To request notification of the operations carried out pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred, To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems, To request compensation for the damage in case of loss due to unlawful processing of personal data. To exercise these rights, you can make a written application with documents identifying your identity or using registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address you have previously notified. Your applications are finalized within thirty days at the latest from the application date.
9. Cookies and Similar Technologies
Our Site uses cookies and similar technologies (pixel tag, web beacon, etc.) to improve user experience, ensure Site functionality, for analytical purposes and marketing activities. Cookie types: Essential Cookies: Cookies necessary for the basic functions of the Site to work. The Site does not work properly without these cookies. Performance Cookies: Cookies used to analyze Site usage, measure visitor numbers and improve Site performance. Functionality Cookies: Cookies used to remember user preferences, language selection, session information and similar functions. Targeting/Marketing Cookies: Cookies used to show ads according to user interests and measure marketing campaigns. You can manage your cookie preferences through your browser settings. However, disabling some cookies may cause some Site features to not work. For detailed information, you can review our Cookie Policy.
10. Personal Data of Children
The Site and our Services do not knowingly collect personal data from children under the age of 18. If we discover that we have collected personal data from a child under 18, we will immediately delete such data. If a parent or guardian believes that a child's personal data has been collected, please contact us.
11. Policy Changes
The Company reserves the right to change this Privacy Policy at any time. Significant changes are announced by publishing on the Site or by notification via email. Changes take effect from the date they are published on the Site. It is recommended that you visit this page regularly to be informed about Policy changes. The last update date of the Policy is stated at the top of the page.
12. Complaint and Objection Rights
If you believe that your rights regarding the processing of your personal data have been violated, you can first apply to the Company. If your application is not answered within sufficient time or if you are not satisfied with the answer, you can file a complaint with the Personal Data Protection Board in accordance with Article 14 of KVKK. Personal Data Protection Board address: Nasuh Akar Mahallesi 1407. Sokak No:4 06520 Balgat/Çankaya/Ankara, Phone: +90 312 216 50 00, Email: kvkk@kvkk.gov.tr, Web: www.kvkk.gov.tr.
13. Contact and Application
You can use the following contact channels for questions about this Privacy Policy, applications to exercise your rights regarding your personal data or complaints: M Global Yazılım Teknoloji Sanayi ve Ticaret Limited Şirketi, Email: info@mdijital.com, Phone: +90 555 123 45 67, Address: Istanbul, Turkey. Applications can be made in writing with documents identifying your identity or using registered electronic mail (KEP) address, secure electronic signature, mobile signature or the electronic mail address you have previously notified. Applications are finalized within thirty days at the latest from the application date and the result is notified to you in writing or electronically.