Personal Data Protection (KVKK)
Talyxa's disclosure under Article 10 of Personal Data Protection Law No. 6698.
Talyxa Teknoloji Yazılım ve Dış Ticaret Limited Şirketi ("Talyxa", "Data Controller") processes personal data as a "Data Controller" within the meaning of Personal Data Protection Law No. 6698 ("KVKK"). This disclosure (Aydınlatma Metni) is provided pursuant to KVKK Article 10 to inform data subjects of the categories of personal data we process, the purposes and lawful bases of processing, the recipients to whom personal data may be transferred, the methods of collection, and the rights you may exercise under Article 11.
01Data Controller
Title: Talyxa Teknoloji Yazılım ve Dış Ticaret Limited Şirketi.
Registered Address: Yahyakaptan Mh. Akasyalar Cd. B Blok Sitesi No. 24/1, İzmit / Kocaeli, Türkiye.
MERSIS No: 0817078614600001.
Tax Office: Alemdar Vergi Dairesi — Tax No: 8170786146.
Email: info@talyxa.com.
02Categories of Personal Data Processed
Identification data: name, surname, business title, employer.
Contact data: business email address, business phone number, country.
Engagement data: project briefs, technical requirements, sample data shared for scoping purposes, meeting notes.
Contractual and financial data: legal entity details, tax identification number, registered address, invoicing contact, transaction metadata.
Operational data: project access credentials, version-control identifiers, audit logs of system actions performed by authorised users.
Technical data: IP address, browser type, operating system, device type, pages visited, and similar information automatically collected by our website.
Recruitment data: for candidates, the information provided in a CV, work history, references, and notes from the recruitment process.
03Purposes of Processing and Lawful Bases
Conclusion and performance of contracts for our software development, mobile, and SaaS services — relying on KVKK Art. 5/2/c (performance of a contract).
Fulfilment of legal obligations under Turkish Tax Procedure Law, the Commercial Code, KVKK, and applicable employment law — relying on KVKK Art. 5/2/ç.
Communication with prospective and existing clients, candidate evaluation, and management of business relationships — relying on KVKK Art. 5/2/f (legitimate interests).
Information security, fraud prevention, and incident investigation — relying on KVKK Art. 5/2/f.
Commercial electronic communications to business contacts — relying on Law No. 6563 and, where required, on your explicit consent under KVKK Art. 5/1.
04Transfer of Personal Data
Personal data may be shared with the following recipients to the extent necessary for the purposes above and on a need-to-know basis:
Cloud and infrastructure providers (such as Vercel, AWS, Microsoft Azure, Google Cloud) for hosting, backups, and project infrastructure.
Software-as-a-Service providers used in our operations (communication tools, project management, version control, CI/CD, support ticketing).
Form-handling and email-delivery providers (such as Formsubmit) for routing messages submitted via our website.
Professional advisors (accountants, auditors, legal counsel) bound by professional confidentiality obligations.
Authorities, courts, and regulators where required by Turkish or applicable foreign law or in response to a valid legal request.
Our subprocessors are bound by written data-processing agreements that meet our security and confidentiality standards.
05International Transfers
Some of our subprocessors are located outside Türkiye, including in the European Union and the United States. International transfers are carried out in compliance with KVKK Article 9 — based on the data subject's explicit consent where required, on the safe-country list published by the Personal Data Protection Authority, or on a written undertaking accompanied by an authorisation from the Authority.
06Methods of Collection
Personal data is collected through our corporate website (talyxa.com), the contact form on the website, email and telephone communications, video meetings, contracts and other documents you provide during onboarding, the project management and communication tools used during an engagement, and — for job applicants — the channels through which you submit your application.
07Your Rights Under KVKK Article 11
Under KVKK Article 11, you have the right to: (a) learn whether your personal data is processed; (b) request information about how it is processed; (c) learn the purpose of processing and whether it is used for that purpose; (d) know the third parties — domestic or foreign — to whom your personal data has been transferred; (e) request rectification of incomplete or inaccurate data; (f) request deletion or destruction within the conditions of the law; (g) request notification of any rectification, deletion, or destruction to third parties to whom your data was transferred; (h) object to any outcome produced solely through automated processing that is to your detriment; and (i) claim compensation for damages suffered as a result of unlawful processing.
08How to Exercise Your Rights
You may submit your request, including the matter you wish to address under Article 11, in writing to our registered address or by email to info@talyxa.com, in accordance with the Communiqué on the Application Procedures and Principles to the Data Controller.
We respond as soon as possible and no later than thirty (30) days after receipt of your request. We may charge the official fee set by the Personal Data Protection Authority where the law allows.
For any questions about this document, please contact us at info@talyxa.com. The Turkish version of this document prevails in case of any discrepancy with translations into other languages.