Privacy Notice

1. Data controller

Your personal data is processed by [Company name] (“IQA Network”) as the data controller.

• Address: Esentepe Mah. Büyükdere Cad. Ferko Signature No: 175/6, Şişli / İstanbul, Türkiye
• Email: info@iqa.network
• MERSİS No: [MERSİS number]

2. Personal data processed

Through the pre-registration and partnership application forms on our website, we process:

• Identity data: first and last name
• Contact data: email address, phone number
• Professional data: your company or organization, fields and areas of expertise, LinkedIn profile URL
• Request data: the description you write about your need or application
• Transaction security data: IP address and timestamp generated when the form is submitted

3. Purposes of processing

• Receiving your pre-registration and inviting you when the portal opens
• Assessing your need and connecting you with a suitable partner in the ecosystem
• Assessing your partnership application and contacting you
• Responding to your requests and applications
• Securing the website and forms and preventing misuse
• Fulfilling our legal obligations

4. Method of collection and legal basis

Your personal data is collected electronically, by fully or partly automated means, when you fill in the forms on our website.

It is processed on the legal bases set out in Article 5(2) of the KVKK: (c) processing is necessary for the establishment or performance of a contract, (ç) processing is necessary for the data controller to fulfil a legal obligation, and (f) processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms.

5. Transfers of personal data

Limited to the purposes above and in line with Articles 8 and 9 of the KVKK, your personal data may be transferred to:

• IQA Network partners: only the information needed to assess your request, shared with partners able to deliver the relevant service
• Service providers: suppliers that support the operation of the website, portal and communication, such as hosting and our email service (Google Workspace)
• Authorized public institutions: where required by law

6. Transfers abroad

The servers of our hosting and email providers may be located outside Türkiye. Such transfers are carried out by providing one of the appropriate safeguards set out in Article 9 of the KVKK. [The legal review should specify the safeguard used, e.g. standard contractual clauses.]

7. Retention period

Your personal data is retained for as long as the purpose of processing requires and for the periods set by applicable law, after which it is deleted, destroyed or anonymized. [The retention period, e.g. 2 years from the last contact, should be confirmed in the legal review.]

8. Your rights under Article 11 of the KVKK

By applying to the data controller, you may:

• Learn whether your personal data is processed
• Request information if your personal data has been processed
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties in Türkiye or abroad to whom your personal data is transferred
• Request correction if your personal data is incomplete or inaccurate
• Request deletion or destruction of your personal data under the conditions of Article 7 of the KVKK
• Request that third parties to whom your data was transferred be notified of any correction, deletion or destruction
• Object to a result against you arising from analysis exclusively by automated systems
• Claim compensation if you suffer damage due to unlawful processing

9. How to apply

You may submit requests regarding your rights in writing to the address above or to our registered electronic mail (KEP) address [KEP address], in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. You may also write to info@iqa.network from the email address registered in our system.

Requests are concluded free of charge within thirty days at the latest, depending on their nature. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.