Protection of Personal Data

Legal Regulations

This notice has been created by Minerva Yazılım Anonim Şirketi ("the Company") as a demonstration of its commitment to the lawful protection and processing of personal data under the Law No. 6698 on the Protection of Personal Data ("the Law"). This notice provides information on how information that can be used to directly or indirectly identify an individual ("Personal Data") is processed.

In this context, pursuant to Article 10 of the Law, this Personal Data Protection and Processing Policy ("Policy") is presented to you to inform you about all the technical and administrative measures we will implement in the field of personal data protection and processing.

Definitions

Company: Minerva Software Inc.

Policy: Minerva Software Inc. Personal Data Protection and Processing Policy

Law: Law No. 6698 on the Protection of Personal Data, published in the Official Gazette dated April 7, 2016, and numbered 29677.

Personal Data: Any information relating to an identified or identifiable natural person.

Data Subject: The natural person whose personal data is being processed.

Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of data, whether wholly or partly automated or non-automated, provided that it is part of a data recording system.

User: Company official or employees

Platform: Minerva Business Software products

Data Processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by the data controller.

Data Controller: The natural or legal person (Minerva Yazılım A.Ş.) who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Data Recording System: A recording system in which personal data is processed by structuring it according to specific criteria.

Business Partners: Individuals (customers) with whom Minerva Yazılım A.Ş. establishes partnerships within the scope of contractual relationships in the context of its commercial activities.

1. WHAT DATA IS BEING PROCESSED?

This section specifies which personal data is provided to and/or obtained from Users by Minerva Yazılım A.Ş. in accordance with the Law No. 6698 on the Protection of Personal Data. Regarding the processing of personal data, the following data is considered, taking into account Articles 4 and 10 of the law.

Name, surname, etc. identification information
Contact information such as address, business or personal email address, phone number, etc.
Passwords and similar security and transaction information used for identity verification and account access.
Payment Information
Product/Service Usage Information
Transaction Security Information
Financial Information
Minerva Yazılım A.Ş. may obtain information about Users' use of the site and Platform by using cookies, which are technical communication files. IP information is collected via cookies to determine access and usage habits of the services offered on the Platform.
In accordance with Articles 3 and 7 of the Law, data that has been irreversibly anonymized will not be considered personal data under the provisions of the law, and processing activities related to such data will be carried out without being bound by the provisions of this Policy.

2. FOR WHAT PURPOSE(S) ARE YOUR PERSONAL DATA PROCESSED?

At Minerva Yazılım A.Ş., your personal data is processed for the following purposes:

a. Execution of business processes by relevant departments to enable relevant individuals to benefit from the products and services offered by Minerva Yazılım A.Ş.:

Keeping communication with the customer alive,
Providing the best possible products and services to the customer,
As part of the services and/or products offered, user definitions must be made for the systems.
Planning the sales processes for products and/or services,
Payment for products, services, and services, selection of the payment method, and collection of fees.
Customizing the products and/or services offered to meet incoming requests, updating and improving the ERP system used due to legal and technical developments, taking into account customer needs,
Announcing new or existing products, services and campaigns, conducting sales and marketing activities,
Planning call center and remote support services activities, tracking call volume and content,
Planning customer relationship management processes,
Negotiation, conclusion and performance of contracts,
Monitoring contract processes and/or legal proceedings,
Tracking customer requests and/or complaints.

b. Planning of Minerva Software Inc.'s human resources policies and business processes:

Planning and executing in-house orientation activities.
Fulfillment of obligations arising from employment contracts and/or legislation for company employees,
Planning employee benefits and advantages.
Monitoring and/or supervising employees' work activities,
Managing personnel recruitment processes,
Planning employee departure procedures,
Wage management,
Planning of Human Resources processes,
Planning appointment, promotion, and termination processes for the company.

c. The necessary work for carrying out commercial activities and/or planning business strategies conducted by Minerva Yazılım A.Ş. shall be carried out by the relevant business units:

Planning of business activities,
Activity management,
Planning and executing corporate communication activities.
Execution of supply chain management processes,
Planning and execution of production and/or operation processes,
Monitoring financial and/or accounting transactions,
Planning and implementation of logistics activities,
The information should be accessible only to authorized persons, protected from unauthorized modifications, and any modifications should be detected; it should be available to authorized users whenever needed.
To ensure and maintain Türkiye's technological independence in the fields of information security, communications, and advanced electronics by producing and implementing scientific and technological solutions with its qualified workforce and strong infrastructure.
Ensuring the information security of all physical and electronic information assets used.
Investigating, evaluating, and measuring activities that may jeopardize information security at regular intervals.
Planning the information access rights of business partners,
Managing relationships with business partners,
Establishing and implementing corporate governance activities,
Activities related to ensuring business continuity,
Managing commercial relationships with partner companies, suppliers, vendors, and service providers.
Developing and planning the company's business strategies,
Managing investor relations,
Conducting job interviews, evaluating job applications,
Establishment, execution, and termination of employment contracts.
Creating user accounts for employees, providing company meal cards,
Ensuring the internal and environmental security of the company, as well as the security of the Website and Applications.
Creating a personal data inventory,
Evaluating and responding to all questions, requests, suggestions, complaints, and applications, including those relating to personal data, whether submitted in writing, orally, or electronically.

d. Planning the necessary activities to identify, introduce, and recommend the products and/or services offered by Minerva Yazılım A.Ş. to relevant individuals based on their needs:

Individuals involved in marketing activities should make accurate observations and assessments, taking consumer behavior into account.
Designing promotional and/or marketing activities tailored to individuals and/or companies,
Planning promotional, advertising and/or marketing activities on digital and/or social media platforms,
Designing and implementing activities on digital and/or other platforms to retain existing customers and/or acquire new ones.
Planning and implementing marketing processes for products and/or services,
Designing, planning, and implementing processes to enhance the products and/or services offered by the company.

e. Ensuring the technical, commercial, and legal security of individuals working for and in a business relationship with Minerva Yazılım A.Ş.

Following up on legal matters,
Performing company and partnership law transactions,
Planning and/or execution of occupational health and/or safety processes,
Providing information to authorized institutions as required by law,
Planning emergency management processes,
Ensuring the security of company premises,
Ensuring the operational security of the company,
Planning the necessary operational activities to ensure that company activities are carried out in accordance with company procedures and/or relevant legislation.
Planning the company's financial risk processes,
Ensuring the security of company assets and/or resources.

3. WHO CAN ACCESS YOUR DATA?

Users may contact Minerva Yazılım A.Ş. in accordance with Article 11 of the Law to request information regarding themselves;

To find out whether your personal data is being processed,
The right to request information regarding the processing of personal data.
To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
The right to request the correction of personal data if it has been processed incompletely or inaccurately.
Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation,
In accordance with relevant legislation, the right to request notification of corrections, deletions, and destructions of personal data to third parties to whom the data has been transferred.
The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.
The right to claim compensation for damages incurred as a result of the unlawful processing of personal data.

They have rights.

Minerva Yazılım A.Ş. may provide its reasoned positive/negative response in writing or digitally, in accordance with the points mentioned above.

4. DURATION OF RETENTION OF PERSONAL DATA

Minerva Yazılım A.Ş. will store personal data provided by users for the duration of service provision, in order to enable the Company and the User to benefit from the Platform and to fulfill the obligations arising from the nature of the Platform and related services, as defined in this Policy and the Human Resources and Personnel Management System User Agreement. In addition, Minerva Yazılım A.Ş. may store personal data for a limited period, solely for the purpose of enabling necessary defenses in the event of any dispute arising between the Company and/or the User, and for the statute of limitations periods determined by relevant legislation.

5. OUR METHODS OF COLLECTING PERSONAL DATA AND THE LEGAL GROUNDS FOR DOING SO.

We may collect and process your Personal Data in accordance with the provisions of this Policy, the Law, and relevant legislation, through written, oral, electronic means, via video/audio recording, and/or by physically meeting with you.

Our data collection process:

Through third-party digital platforms or software, including websites, mobile applications, email, and recruitment portals,
Through various means such as contracts, applications, forms, call centers, remote support, sales and marketing units, cookies on websites, business cards, and telephone,
Through face-to-face interviews with the Data Subject,

It is possible.

6. YOUR RIGHTS AS A DATA SUBJECT AND THE EXERCISE OF RELATED RIGHTS

a. Rights of the Personal Data Subject:

In accordance with Article 11 of the Law, as a Data Subject, you can apply to our Company to request information about yourself;

To find out whether your personal data is being processed,
You have the right to request information regarding the processing of your personal data.
To learn the purpose for which your personal data is processed and whether it is being used appropriately for that purpose,
Knowing the third parties to whom personal data is transferred, both domestically and internationally.
The right to request the correction of personal data if it has been processed incompletely or inaccurately.
Even if the data has been processed in accordance with the Personal Data Protection Law and other relevant laws, you have the right to request the deletion and destruction of your data if the reasons requiring its processing no longer exist.
The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.
You have the right to claim compensation for any damages you suffer as a result of the unlawful processing of your personal data.

You have rights.

b. Cases Where the Data Subject Cannot Assert Their Rights:

Data subjects may not exercise the rights listed above, except for the right to claim compensation for damages, in accordance with Article 28 of the Law on the Protection of Personal Data, in the following situations:

Personal data may be processed by natural persons solely for activities related to themselves or family members living in the same household, provided that the data is not disclosed to third parties and that obligations regarding data security are complied with.
The processing of personal data for purposes such as research, planning, and statistics through official statistics and by anonymizing it,
Personal data may be processed for artistic, historical, literary or scientific purposes, or within the scope of freedom of expression, provided that it does not violate national defense, national security, public safety, public order, economic security, privacy or personal rights, or constitute a crime.
The processing of personal data by public institutions and organizations authorized by law to carry out preventive, protective, and intelligence activities aimed at ensuring national defense, national security, public safety, public order, or economic security.
Processing of personal data by judicial authorities or enforcement agencies in relation to investigation, prosecution, trial or execution proceedings.

In accordance with Article 28(2) of the Law on the Protection of Personal Data, personal data owners cannot exercise their other rights listed in Article 5(1), except for the right to claim compensation for damages, in the following cases:

The processing of personal data is necessary for the prevention of crime or for criminal investigation,
Processing of personal data that has been made public by the data subject themselves,
Personal data processing is permitted when authorized and competent public institutions and organizations, as well as professional organizations with the status of public institutions, are necessary for the performance of their supervisory or regulatory duties, or for disciplinary investigations or prosecutions, based on the authority granted by law.
Personal data processing is necessary for the protection of the State's economic and financial interests in relation to budgetary, tax, and financial matters.

Contact Us

You can contact us to submit all your questions and comments regarding the protection and processing of personal data.