KVKK privacy notice

Data controller

SMYRNA BİLİŞİM, the provider of CoreMamba, is the data controller for the activities described here. Business contact and tax details appear below.

Data, purposes and legal bases

Email, account and licence information is processed to establish or perform a contract for registration, authentication and service delivery (Article 5/2-c).

Order, payment and accounting records are processed for legal obligations and the establishment, exercise or protection of rights (Article 5/2-ç and e).

IP, session, device and security records are processed for legitimate interests in preventing unauthorised access, fraud and abuse, provided your fundamental rights are protected (Article 5/2-f). Support correspondence is processed for contract performance or protection of rights, depending on the request.

If a separate activity requires consent, specific information and permission are provided separately. Viewing this notice or accepting the terms does not constitute such consent.

Collection and recipients

Data is collected electronically through website and application forms, session and licensing operations, order records, security logs and correspondence you send us.

Recipients include hosting, security, communications, storage and backup suppliers within their roles; payment institutions and banks for payments; authorised accounting and legal advisers; and public authorities for lawful requests. Article 9 additionally applies to international transfers.

Your Article 11 rights

You can ask whether your data is processed, request information about processing, learn its purpose and whether it is used accordingly, identify domestic or foreign recipients, request correction, and request deletion or destruction when the legal conditions are met.

You can request that recipients be notified of correction or deletion, object to an adverse outcome based solely on automated analysis, and seek compensation for damage caused by unlawful processing.

How to apply

Submit a written request to the business address below, or email us using the address registered in our system and the email access on the Contact page. Other application methods provided by law remain available.

Describe your request and provide enough information to verify your identity. Avoid sending unnecessary identity documents or sensitive information. Requests are addressed as soon as possible and within 30 days. The Board’s applicable tariff may apply if a request entails an additional cost.