KVKK Information Notice

Last Updated: 06.08.2026

This KVKK Information Notice ("Notice") is prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"). It explains how Vayotek Bilgi Teknolojileri San. ve Tic. Ltd. Şti. ("VAYOTEK", "we", "our", "us") processes personal data obtained through www.vycall.com ("Website").

This Notice applies only to data processing activities carried out within the scope of Turkish data protection legislation (KVKK).

1. Data Controller

The data controller under KVKK is:

Vayotek Bilgi Teknolojileri San. ve Tic. Ltd. Şti.

• Address: Gülbahçe Mah. İçmeler Cad. No:14/1, Daire B05, Bilişim Vadisi, Urla – Izmir / Türkiye
• E-mail: info@vycall.com, info@vayotek.com
• Phone: +90 232 335 1554
• MERSIS: 0924093922500001

2. Personal Data We Process

We may process the following categories of personal data through the Website:

A) Data submitted via forms

• Full name
• Phone number
• E-mail address
• Company name (if provided)
• Message/request details
• Product/service interest
• IP address
• Timestamp of submission

B) Data automatically collected during visits

• IP address
• Browser/Device information (User-Agent)
• Access date and time
• Cookies
• Your cookie preference together with the date it was given, your IP address and browser information (for the purpose of evidencing consent)
• An irreversible cryptographic digest (HMAC-SHA256) derived from your IP address for visitor counting
• Server logs

C) Data received via phone, e-mail or WhatsApp

• Name & surname
• Contact information
• Company details (if provided)
• Content of your request

D) Advertising measurement (attribution) data

• Google Ads advertising click identifier (gclid, gbraid, wbraid)
• Campaign source parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content)
• The page you landed on and the page from which you submitted the enquiry form

This data is generated only if you reached the Website through an advertising link; it is not generated when you type the address directly or arrive from organic search results. On its own it does not identify you; however, because it is stored together with the enquiry form you submit, it is treated as personal data and protected under this Information Notice. Technical details of collection and retention are set out in the Cookie Policy.

3. Purposes of Processing

Your personal data may be processed for the following purposes:

• Handling your requests and inquiries
• Providing quotation and support services
• Managing customer communication
• Ensuring information security
• Maintaining server and system logs
• Complying with legal obligations
• Website analytics and improvement
• Marketing communications (only with explicit consent)
• Measuring advertising performance and analysing the effectiveness of advertising and marketing spend

4. Legal Bases for Processing Under KVKK

Your personal data is processed on the following legal grounds:

• KVKK Art. 5/2-c: Necessity for establishing or performing a contract
• KVKK Art. 5/2-ç: Fulfillment of legal obligations
• KVKK Art. 5/2-f: Legitimate interests of the data controller
• KVKK Art. 5/1: Explicit consent (for forms, cookies, marketing activities)

5. Transfer of Personal Data

5.1. Domestic transfers

Personal data may be shared with:

• Courier and logistics companies
• Customer support teams
• Software and cloud service providers
• Financial advisors and auditors
• Legally authorized institutions
• Security and IT service providers

Only where necessary.

5.2. Transfer abroad

The server hosting the Website is located in Türkiye (Istanbul). Your form data, server logs and cookie consent record are stored on that server in Türkiye and are not transferred abroad.

Transfers abroad occur only through the third-party services we use and only in respect of the data listed below. These services are provided by Google (Google Analytics, Google Ads, reCAPTCHA) and Microsoft (Clarity):

• IP address
• Browser and device information
• Cookie identifiers
• On-page interaction and session recordings (Microsoft Clarity — only with analytical cookie consent)
• Advertising measurement (attribution) data

Legal bases for international transfers:

• KVKK Art. 9
• Explicit consent where required
• The data processing terms agreed with the relevant providers (Google, Microsoft)

In addition, for advertising performance measurement purposes, where your enquiry results in a sale, the advertising click identifier (gclid) together with the conversion date and sale amount is transferred to Google Ireland Limited and Google LLC. Your name, telephone number and e-mail address are not included in this transfer. The legal bases for this transfer are KVKK Art. 9 and the data processing terms agreed with Google.

6. Data Retention Periods

Your personal data is retained for the following periods:

7. Rights of Data Subjects Under KVKK (Art. 11)

You have the right to:

• Learn whether your data is processed
• Request information about processing
• Learn the purpose of processing
• Know third parties to whom data is transferred
• Request correction
• Request deletion or anonymization
• Request notification of corrections/deletions to third parties
• Object to processing
• Claim compensation for unlawful processing

8. Contact for KVKK Requests

You may submit your KVKK applications via:

• info@vycall.com
• info@vayotek.com

Requests are answered within 30 days. Identity verification may be required to ensure data security.

9. Security Measures

We take appropriate administrative and technical measures to protect your data, including:

• SSL/TLS encryption
• Firewalls
• Access control systems
• Logging and monitoring
• Periodic security updates
• Data minimization principles

10. Updates

This Notice may be updated when necessary. The latest version is published on this page and becomes effective immediately.