PERSONAL DATA PROTECTION

Website and Contact Form Privacy Notice

Last updated: August 20, 2026

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 (the "Law"), the data controller is Rezonant Eğitim Danışmanlık ve Organizasyon Ltd Şti ("Rezonant" or the "Company"). This notice explains how personal data is processed when you visit the Rezonant website or use the contact form.

2. Personal data processed

The following categories of personal data may be processed through the website and contact form:

  • Identity data: first and last name.
  • Contact data: business email address and optional telephone number.
  • Professional and organizational data: company, country, area of interest and information you choose to include in your message.
  • Request and transaction data: the subject, content and date of your request, and records relating to its management.
  • Transaction security data: IP address, date and time logs, browser and device information, and error and security logs.

Please do not submit special category personal data or unnecessary sensitive information through the contact form.

3. Purposes of processing

Your personal data may be processed for the following purposes:

  • Receiving, evaluating and responding to your contact request.
  • Contacting you about process transformation, CID222, a demo, the partner program, careers or another request.
  • Directing your request to the appropriate team or solution partner and planning the next steps.
  • Establishing and managing customer and business relationships.
  • Maintaining the security, continuity and technical performance of the website.
  • Detecting and preventing misuse, unauthorized access and security incidents.
  • Fulfilling legal obligations, managing requests and disputes, and establishing, exercising or protecting our rights.

4. Legal grounds

Your personal data may be processed on the following legal grounds under Article 5 of the Law:

  • Processing is directly related to the establishment or performance of a contract.
  • Processing is necessary for the data controller to fulfil a legal obligation.
  • Processing is necessary for the establishment, exercise or protection of a right.
  • Processing is necessary for Rezonant’s legitimate interests, provided that your fundamental rights and freedoms are not harmed.
  • Your explicit consent, where explicit consent is required.

5. Collection method

Your personal data is collected electronically by automated or partially automated means when you visit the website, complete the contact form, contact us by email or telephone, and when website operation and security logs are generated.

6. Disclosure of personal data

Your personal data may be disclosed, only to the extent necessary and limited to the relevant processing purpose, to the following recipient groups:

  • Providers of hosting, infrastructure, email, security, maintenance and communications services.
  • Where required by the nature of your request, Rezonant’s selected solution partners and professional advisers.
  • Authorized public bodies and judicial or administrative authorities where required by law.

Your personal data is not sold or shared for independent third-party marketing.

7. International transfers

Personal data may be transferred outside Türkiye where website infrastructure, hosting, security, email or communication services are provided by service providers located abroad or using servers outside Türkiye. Such transfers are carried out under the legal mechanisms set out in Article 9 of the Law and applicable secondary legislation, including an adequacy decision, appropriate safeguards, standard contractual clauses or, where required, explicit consent.

8. Retention period

Your personal data is retained for as long as required by the processing purpose and for the limitation and retention periods prescribed by applicable law. At the end of the relevant period, data is deleted, destroyed or anonymized, taking legal obligations and the protection of the Company’s rights into account.

9. Your rights

Under Article 11 of the Law, you may apply to Rezonant to:

  • Learn whether your personal data is being processed.
  • Request information if your personal data has been processed.
  • Learn the purpose of processing and whether the data is used in accordance with that purpose.
  • Know the third parties to whom your personal data is transferred in Türkiye or abroad.
  • Request correction if your personal data has been processed incompletely or inaccurately.
  • Request deletion or destruction of your personal data under the conditions set out in the Law.
  • Request notification of correction, deletion or destruction to third parties to whom the data has been transferred.
  • Object to an outcome against you resulting from the analysis of processed data exclusively by automated systems.
  • Claim compensation if you suffer damage as a result of unlawful processing.

10. How to exercise your rights

You may submit requests under the Law by email to kickstart@rezonant.com.tr or in writing to the postal address below, including information sufficient to verify your identity and an explanation of your request:

İçerenköy Mah. Topçu İbrahim Sk. Quick Tower No: 8-10D, Ataşehir, Istanbul, Türkiye

Applications are concluded free of charge as soon as possible and no later than thirty days, depending on the nature of the request. Where the process requires an additional cost, the fee prescribed by applicable legislation may be charged.