Web Forms Privacy Notice

At Mechsoft Bilgi ve İletişim Teknolojileri Ticaret A.Ş. (“MechSoft”), we care about the security of your personal data and your privacy. As data controller under the Turkish Personal Data Protection Law No. 6698 (the “Law”), we explain in this Privacy Notice how we process the personal data you submit through the contact, demo and service request forms, the e-book and report download, webinar registration and survey forms, and the AI value calculator and consolidation assessment tools on www.mechsoft.com.tr (the “Forms”).

1. Personal data we process

• Identity: first name and surname
• Contact details: email address, phone number
• Professional information: your company and job title
• Request details: your message, the product, service or content you are interested in and your survey answers; in the assessment tools, your industry, number of employees, the processes and volumes you select, the applications you use and their user numbers, any cost figures you enter, the challenges you tick and the report we send you
• Transaction security: IP address, time of submission, bot-check result

The Forms do not ask for special categories of personal data; please do not enter such data in free-text fields.

2. How we collect your data and our legal grounds

Your personal data is collected electronically and automatically through the Forms and processed on the following legal grounds under Article 5(2) of the Law:

• Processing necessary for entering into or performing a contract (Art. 5/2-c): preparing and sending the assessment report you request, and handling your demo, quotation, meeting and content requests
• Our legitimate interests (Art. 5/2-f): contacting you about your request, recording it in our customer relationship management (CRM) system, preventing misuse and keeping our systems secure
• Compliance with legal obligations (Art. 5/2-ç): responding to requests from competent authorities

We do not send you commercial electronic messages (campaigns, newsletters, etc.) on the basis of the Forms. Such messages are sent only with your separate consent and registration in the Turkish Message Management System (İYS).

3. Purposes of processing

We process your personal data to (i) assess and respond to your request, (ii) run demo, quotation and meeting processes and send you the content you request (e-books, reports, webinar recordings), (iii) prepare AI value and consolidation reports with the help of artificial intelligence and send them to you by email, (iv) manage customer relationships, (v) keep information secure and prevent misuse, and (vi) meet our legal obligations and respond to requests from competent authorities.

4. Reports prepared with artificial intelligence

The information you enter in the assessment tools is sent, together with MechSoft’s benchmark data, to an artificial intelligence model that prepares your report. The report is based only on the information you provide, and the AI does not change the calculated figures. Reports are estimates and do not constitute a legal or financial commitment. No automated decision with legal effects on you is taken on the basis of the AI output.

5. Transfers of personal data

Within the limits of the purposes above and under Article 8 of the Law, your personal data may be shared with our information technology, cloud infrastructure and software service providers, our legal advisers and, on request, competent public authorities.

As the servers of the artificial intelligence services used to prepare reports and of the bot-check service may be located outside Türkiye, your personal data may be transferred abroad for the provision of these services, in accordance with the procedures and principles set out in Article 9 of the Law.

6. How long we keep your data

We keep your personal data for as long as needed to handle your request and the related business relationship, and for the periods required by applicable legislation. At the end of these periods it is deleted, destroyed or anonymised in line with MechSoft’s personal data retention and destruction policy.

7. Your rights under the Law

Under Article 11 of the Law, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to ask for incomplete or inaccurate data to be corrected; to ask for it to be erased or destroyed under Article 7 of the Law; to ask for these actions to be notified to the third parties to whom it was transferred; to object to a result against you arising exclusively from automated analysis; and to claim compensation if you suffer damage from unlawful processing.

You can send your requests in writing, using the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, to Nida Kule Kuzey, Barbaros Mah. Begonya Sok. No:3/B, Ataşehir, Istanbul, Türkiye.