Personal Data Protection Privacy Notice
Information on the scope, purposes and legal grounds of the processing of personal data you share with Sofbux.
Last updated:Important information: Sofbux does not request sensitive personal data through its communication channels. Please do not include health, biometric, criminal conviction, political opinion or similar sensitive information in your project message.
1. Purpose and Scope
This Privacy Notice has been prepared under Article 20 of the Constitution of the Republic of Türkiye, Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It informs website visitors and persons who submit contact or project requests, take part in proposal processes or state a commercial communication preference.
Personal data is processed in line with the principles in KVKK Article 4: lawfully and fairly; accurately and, where necessary, up to date; for specified, explicit and legitimate purposes; in a relevant, limited and proportionate manner; and for no longer than required by law or the relevant processing purpose.
2. Data Controller
The data controller under KVKK Article 10 is Sofbux. You may contact the controller at Esentepe Mah. Büyükdere Cad. Levent 199 No:199 İç Kapı No:6 Şişli / İstanbul or info@sofbux.com.
3. Personal Data Processed
Identity and contact data
- Full name
- Email address
- Telephone number
Company, request and transaction data
- Company name, if provided
- Requested service or services
- Project, requirement and message content
- Correspondence, proposal and process records
- Submission date, time and request reference
Marketing preference data
- Commercial communication preference
- Date, method and text version associated with giving or withdrawing the preference
Security and reCAPTCHA data
- IP address
- Browser, device and operating system information
- Access, submission, error and security logs
- Google reCAPTCHA token, verification result and interaction signals analysed to prevent abuse
Sofbux does not request or intend to process sensitive personal data under KVKK Article 6 through the contact form. Unsolicited sensitive data is separated, deleted or securely destroyed where it is not required.
4. Collection Methods
Data is collected electronically when you complete the contact form, contact Sofbux through its published corporate channels, or take part in proposal and project discussions. Security, submission and technical records may be generated automatically by the website, server, application infrastructure and Google reCAPTCHA.
5. Processing Purposes and Legal Grounds
Contact, project assessment and proposals
Identity, contact, company and request data is processed to receive and assess your request, contact you and prepare an appropriate solution or proposal under KVKK Article 5/2-c where necessary for steps requested before entering into a contract, and otherwise under Article 5/2-f for Sofbux’s legitimate interests without prejudicing your fundamental rights and freedoms.
Contract and customer relationship management
Request and correspondence records are processed under KVKK Article 5/2-c to establish or perform a service relationship and to carry out project communication and technical consultancy.
Security and prevention of abuse
IP, access and security logs and reCAPTCHA data are processed under KVKK Articles 5/2-f and 12 to secure the website and form, detect spam, fraud and automated abuse, and resolve technical issues.
Legal obligations and legal claims
Data may be processed under KVKK Article 5/2-ç to comply with lawful authority requests and legal obligations, and under Article 5/2-e where necessary for the establishment, exercise or protection of a right.
Commercial communications
Commercial communications are sent only where an optional preference has been given. Contact and preference records are processed on the basis of explicit consent under KVKK Article 5/1 and, where applicable, approval under Law No. 6563. You may withdraw your preference at any time.
6. Transfers of Personal Data
Data may be shared, only to the extent necessary for the relevant service, with providers of hosting, cloud infrastructure, information security, email and corporate communication services under KVKK Article 8. It may also be disclosed to courts, public authorities and legally authorised bodies to meet legal obligations or protect legal rights.
Google reCAPTCHA may transmit IP address, browser and device data, page information and interaction signals to Google and process them on systems outside Türkiye. International transfers are carried out under KVKK Article 9 and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad, using an applicable adequacy decision, appropriate safeguard or statutory incidental-transfer ground.
7. Retention and Disposal
Data is retained only for the time required by its purpose and applicable limitation or statutory retention periods. The nature of the request, continuation of a proposal or contract, legal obligations, potential disputes and security needs are considered when determining retention.
When all processing grounds cease to exist, data is deleted, destroyed or anonymised ex officio or following a valid request under KVKK Article 7 and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.
8. Data Security
Under KVKK Article 12, Sofbux applies risk-based administrative and technical measures including access controls, least privilege, protection in transit, security logging, infrastructure updates, backup and incident response procedures, confidentiality restrictions and controlled disposal.
9. Your Rights Under the KVKK
Under KVKK Article 11, you may ask whether your data is processed; request information; learn the purpose and whether data is used accordingly; learn recipients in Türkiye or abroad; request correction, deletion or destruction and notification of these operations to recipients; object to adverse outcomes produced exclusively by automated analysis; and claim compensation for damage caused by unlawful processing.
10. How to Apply
Under KVKK Article 13 and the Communiqué on Application Procedures and Principles, you may submit a written request marked “KVKK Data Subject Application” to Esentepe Mah. Büyükdere Cad. Levent 199 No:199 İç Kapı No:6 Şişli / İstanbul. You may also email info@sofbux.com using an address you previously notified to Sofbux and that is registered in our systems.
Applications must contain the information required by the Communiqué, including identification and contact details and the subject of the request. Additional proportionate information may be requested to verify identity and authority. Applications are concluded free of charge as soon as possible and within thirty days at the latest; the fee in the tariff set by the Board may apply where the operation entails an additional cost.
11. Updates
This Notice may be updated following changes to Sofbux’s processing activities or applicable law. The current version becomes effective when published on the website. Where a processing purpose changes, additional information will be provided before the new processing begins.