Personal Data Notice

Data controller and scope

Last updated: 14 September 2026

Tigur Medya Yazılım Danışmanlık, which trades under the Tigur brand, is the data controller for the activities described below on the tigur.com.tr website. This notice has been prepared under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (the Law, also known as KVKK).

Address for written applications: Ümit, 2502. sok. no:3/B

Email for personal data applications: info@tigur.com.tr

The notice covers personal data processed during your site visit, use of the contact form and correspondence concerning a request initiated through the site. If a service relationship is established, separate information is provided about other processing activities required for that relationship.

Data processed and collection methods

The contact form collects your name, email address and message and, if you provide them, your company, phone number and the service you are interested in. Subsequent email correspondence and meeting notes may also form part of the request record.

During access to the site, technical systems process IP address, access time, the requested page or resource, browser information and error/security records. Information processed through cookies is listed separately in the Cookie Policy according to the tools used.

Data is collected electronically by automated means through the website, contact form, email and technical infrastructure, and by partially non-automated means for correspondence and meeting notes that form part of a data filing system.

Purposes and legal grounds

Responding to requests and questions: We process identity, contact and message information to assess and answer incoming requests. For general questions and communications on behalf of an organisation, the legal ground is our legitimate interest in conducting business communication, provided that your fundamental rights and freedoms are not harmed (Article 5/2-f of the Law).

Proposal and pre-contract preparation: We process information directly related and necessary to establishing a service contract to which you will personally be a party, for preparing a proposal (Article 5/2-c). When you contact us as a company representative, personal data relating to the representative is processed on the basis of legitimate interest in conducting corporate communication (Article 5/2-f).

Technical security and error monitoring: We process technical access records to detect unauthorised use, protect system security and resolve faults. The legal ground is our legitimate interest in operating a secure site, provided that your fundamental rights and freedoms are not harmed (Article 5/2-f).

Protection of rights: Where necessary in a dispute, we process relevant requests and correspondence to establish, exercise or protect a right (Article 5/2-e).

Handling applications and official requests: We process necessary information to meet legal obligations when responding to personal data applications under the Law and properly submitted requests from authorised institutions (Article 5/2-ç).

Optional cookie processing: Where used, analytics or advertising activities that require explicit consent are carried out only after you consent to the relevant preference (Article 5/1). The tools and their purposes are explained in the Cookie Policy. Sending a contact request does not constitute explicit consent for these activities.

Retention period

Personal data is deleted, destroyed or anonymised when retention is no longer necessary. Records that must be preserved because of a dispute are retained only within the scope and for the period required by the relevant legal need.

Your rights under the Law

Under Article 11 of the Law, you may learn whether your personal data has been processed; request information if it has; and ask about the purpose of processing and whether the data is used in line with that purpose.

You may learn which third parties receive your data domestically or abroad and request correction of incomplete or incorrectly processed data. Under the conditions in Article 7 of the Law, you may request deletion or destruction and ask that correction, deletion or destruction be notified to third parties to whom the data has been transferred.

You may object to an outcome against you resulting from analysis of your data exclusively by automated systems and request compensation if you suffer damage because your data has been processed unlawfully.

How to apply

You may send a written application to Ümit, 2502. sok. no:3/B. You may also apply to info@tigur.com.tr using an email address you previously provided to us and that is registered in our system. Applications made by other methods specified in the Communiqué on the Principles and Procedures for Applications to the Data Controller are also assessed if they meet the relevant conditions.

Include your name and surname, your signature for written applications and, if you are a Turkish citizen, your Turkish identity number; if you are a foreign national, include your nationality and passport number or identity number, if any. Add your address for notification, email address for correspondence if available, phone and fax numbers, the subject of your request and any relevant documents. No information or documents beyond what is necessary to verify your identity are requested.

Applications are resolved as soon as possible according to their nature and within thirty days at the latest. If the process incurs an additional cost, the fee in the tariff determined by the Board may be charged. If the application results from an error by the data controller, any fee collected is refunded.