Personal Data Protection Notice

Effective date: 2026

1. Data Controller

Pursuant to the Law No. 6698 on the Protection of Personal Data (KVKK), your personal data may be processed by Most Idea Software Industry and Trade Limited Company (Most Idea or the Company), acting as the data controller, whose details are provided below.

2. Processed Personal Data

The following personal data may be processed by our Company:

• Identity information
• Contact information
• Company and job-related information
• Customer transaction information
• Request and complaint information
• Proposal and project information
• Financial and payment information
• Legal transaction information
• Transaction security information
• IP address and log records
• Website usage data
• Cookie data
• Digital behavior data
• Marketing data
• Visual and audio records
• Location information
• Call center records
• Technical device and browser information

3. Methods of Collecting Personal Data

Your personal data may be collected through the following methods:

• Website
• Contact forms
• Proposal forms
• Demo and project request forms
• E-mail communications
• Telephone calls
• WhatsApp and similar communication channels
• Social media platforms
• Mobile applications
• CRM systems
• ERP systems
• Live support systems
• Cookies and analytics tools
• Digital advertising platforms
• Physical meetings
• Meetings and organizations
• Contracts and commercial documents

4. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

4.1 Service and Operational Processes

• Providing services
• Managing proposal processes
• Conducting project analysis processes
• Managing software development processes
• Mobile application development processes
• Web design and software development processes
• Technical support activities
• After-sales support processes
• Customer relationship management
• Managing operational processes
• Ensuring business continuity

4.2 Commercial Processes

• Preparing proposals
• Managing contract processes
• Financial and accounting processes
• Collection processes
• Current account processes
• Conducting commercial activities
• Sales and marketing activities
• Business development activities

4.3 Digital Processes and Marketing

Personal data processing activities may be carried out through the Company website, proposal forms, contact forms, live support systems, analytics tools, advertising platforms, cookie technologies, remarketing tools, and digital communication channels.

Cookies, analytics tools, and similar technologies may be used on our website in order to improve user experience, measure performance, manage security processes, and optimize advertising/marketing activities.

Personal data shared through contact forms, proposal requests, demo requests, project analysis forms, and similar application processes may be processed for purposes such as creating proposals, conducting project evaluation processes, customer relationship management, and commercial communication activities.

4.4 Technological Infrastructure Processes

Personal data may be processed within the scope of servers, hosting services, e-mail infrastructure, security systems, CRM, ERP, project management systems, cloud computing services, and similar technological infrastructures.

Personal data may also be processed in a limited and proportionate manner within the scope of AI-supported analysis, automation, support, and content management systems used by the Company.

4.5 Legal Processes

• Fulfillment of legal obligations
• Responding to requests from authorized institutions
• Managing legal dispute processes
• Fulfillment of burden of proof obligations
• Information security processes
• Audit activities

5. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds:

• Explicitly stipulated by laws
• Directly related to the establishment or performance of a contract
• Fulfillment of legal obligations
• Establishment, exercise, or protection of a legal right
• Legitimate interests of the data controller
• Explicit consent
• Data made public by the data subject

Commercial electronic communications are carried out in accordance with applicable legislation and subject to explicit consent/approval processes where required.

6. Transfer of Personal Data

Your personal data may be transferred to the following parties:

• Authorized public institutions and organizations
• Legally authorized private entities
• Business partners
• Suppliers
• Hosting providers
• Cloud infrastructure service providers
• CRM and ERP infrastructure providers
• Accounting and financial consultants
• Legal consultants
• Technical support companies
• Cargo and logistics companies
• Digital advertising and analytics platforms
• Software and integration providers

Due to the fact that the infrastructures of digital service providers used by the Company may be located abroad, personal data may be processed on overseas service provider infrastructures within the scope of Article 9 of the KVKK, provided that the necessary technical and administrative measures are taken.

In this context, services may be obtained from global infrastructure providers such as Google, Meta, Microsoft, OpenAI, Anthropic, CDN services, cloud services, and similar providers.

7. Use of Cookies

The following types of cookies may be used on our website:

• Mandatory cookies
• Performance cookies
• Analytical cookies
• Marketing cookies
• Retargeting cookies
• Session cookies
• Security cookies

These cookies may be used for improving user experience, performance measurement, advertising optimization, and security purposes.

8. Data Security

Our Company takes the necessary technical and administrative measures to ensure the protection of personal data. The following measures are implemented:

• Access control systems
• Authorization management
• Firewall systems
• Antivirus infrastructures
• Encryption methods
• Network security solutions
• Backup systems
• Logging infrastructures
• Up-to-date software infrastructures
• Data access restrictions
• Personnel authorization controls
• Security tests
• Penetration tests
• Server security measures

9. Retention Period of Personal Data

Personal data is retained for the periods stipulated by the applicable legislation or for the duration required by the purpose of processing. Upon expiration of such periods, personal data is deleted, destroyed, or anonymized.

Retention periods are determined by taking into consideration commercial legislation, tax legislation, Turkish Commercial Code, Labor Law, electronic commerce legislation, distance sales legislation, and KVKK obligations.

10. Rights of the Data Subject

Under Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is processed
• To request information regarding processing activities
• To learn the purpose of processing and whether data is used in accordance with its purpose
• To know the third parties to whom personal data is transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction of personal data
• To request notification of corrections/deletions to third parties to whom data has been transferred
• To object to analyses conducted exclusively through automated systems
• To request compensation in case of damages due to unlawful processing

11. Application Method

You may submit your requests within the scope of the KVKK to us through the following methods:

Written Application Address

E-posta

Your applications will be evaluated within a maximum of 30 (thirty) days pursuant to Article 13 of the KVKK.

12. Updates and Amendments

Most Idea Software Industry and Trade Limited Company reserves the right to amend this Information Notice, provided that such amendments comply with the applicable legislation. The updated text shall enter into force on the date it is published on the website.

13. Effectiveness

This Information Notice has been updated as of 2026 and entered into force on the date of publication.