Personal Data Protection Notice

1. Data controller

Data controller: RMCODE

Address: Universiteler Mah. 1597. Cad. Bilkent Center AVM, Ankara, Türkiye

Email: info@rmcode.io

2. Personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

• Identity data: your name.
• Contact data: your email address.
• Request data: the subject and content of the message you send us, including any information you choose to share about your company or project.
• Transaction security data: IP address, browser and device information, and access logs generated automatically when you use the website.
• Usage data (only if you accept analytics cookies): pages and language versions you visit, the referring website or campaign, approximate location, device and browser information, interactions on the website, and an online identifier assigned by Google Analytics.

3. Purposes of processing

We process your personal data for the following purposes:

• Responding to your enquiries and communicating with you.
• Preparing proposals and carrying out pre-contractual discussions about a potential project.
• Evaluating job applications and expressions of interest sent through the website.
• Measuring and analysing how the website is used, in order to improve its content and performance (only with your explicit consent).
• Ensuring the security and proper operation of the website and our information systems.
• Complying with our legal obligations and responding to requests from authorised public bodies.

4. Legal grounds

Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:

• Processing is directly related to the establishment or performance of a contract (Art. 5/2-c).
• Processing is necessary for us to comply with a legal obligation (Art. 5/2-ç).
• Processing is necessary for the establishment, exercise, or protection of a right (Art. 5/2-e).
• Processing is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f).
• Your explicit consent, for the use of analytics cookies (Art. 5/1).

5. Method of collection

Your personal data is collected electronically, partly by automated means, through the contact form on our website, by email, and through server logs generated when you use the website. If you accept analytics cookies, usage data is also collected through Google Analytics cookies.

6. Transfer of personal data

For the purposes above, your personal data may be transferred to:

• Service providers that operate our contact form, email, hosting, and server infrastructure, limited to what is necessary for these services.
• Google, as our web analytics provider, only if you accept analytics cookies.
• Authorised public institutions and organisations, where required by law.

Some of these service providers may store data on servers located outside Türkiye. Such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK. Usage data collected through Google Analytics is transferred to Google's servers abroad, including in the United States. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page.

7. Retention

Your personal data is kept for as long as necessary for the purpose for which it was collected and for the periods required by applicable legislation. After that, it is deleted, destroyed, or anonymised.

8. Your rights

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed.
• Request information about the processing if it has been processed.
• Learn the purpose of the processing and whether the data is used in line with that purpose.
• Know the third parties in Türkiye or abroad to whom your personal data is transferred.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK.
• Request that the third parties to whom your data was transferred be notified of any correction, deletion, or destruction.
• Object to a result against you that arises from analysis of your data exclusively by automated systems.
• Claim compensation for damages arising from unlawful processing of your personal data.

9. How to apply

You can submit requests regarding these rights in writing to Universiteler Mah. 1597. Cad. Bilkent Center AVM, Ankara, Türkiye, or by email to info@rmcode.io, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. We will respond to your request free of charge within 30 days at the latest. If the response requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.