This policy explains how your personal data is handled when you use the ESPO Bilişim website and our mobile applications that link to this policy.
Last updated: July 29, 2026
We explain what data we process, why we use it, and with whom it may be shared.
We aim to process only the data needed to provide the relevant service.
You can manage app permissions on your device and exercise your privacy rights.
This Privacy Policy applies to www.espobilisim.com and to mobile applications, products, and support services published by ESPO Bilişim that link to this policy.
ESPO Bilişim acts as the data controller for personal data processed through these channels under Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”). Additional notices or store privacy disclosures for a particular application supplement this policy for that application’s specific data practices.
The data processed varies by the service you use and the features of the relevant application. The inclusion of a data type below does not mean that every application collects it.
Personal data may be collected automatically or by non-automated means through web and mobile forms, email, telephone, in-app actions, and device or server logs.
Depending on the activity, processing relies on the legal bases in Articles 5 and 6 of the KVKK, including performance of a contract, compliance with a legal obligation, establishment or protection of a right, and legitimate interests that do not harm your fundamental rights. We request explicit consent where required by law. You may withdraw consent for consent-based processing at any time.
Personal data may be shared, only as necessary for the stated purposes, with hosting, email, technical support, security, and infrastructure providers, as well as authorized public bodies and other legally authorized recipients. We do not sell personal data.
Where data is transferred abroad, we rely on the applicable mechanism under Article 9 of the KVKK—an adequacy decision, appropriate safeguards, or a statutory exception—and apply necessary administrative and technical measures. Platforms such as the App Store and Google Play may process data independently under their own privacy terms.
We retain personal data for as long as necessary for the purpose of processing and for statutory limitation or retention periods. At the end of that period, data is deleted, destroyed, or anonymized in accordance with applicable law. The data type, service relationship, legal obligations, and potential dispute periods are considered when setting retention periods.
We use appropriate technical and organizational safeguards such as access controls, authorization, log monitoring, and updates to prevent unlawful processing or access and to preserve data. However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
The site may use browser storage to provide essential functions and remember your language preference on your device. If non-essential analytics, advertising, or similar technologies are introduced, we will provide legally required information and, where necessary, a choice or consent mechanism. You can delete cookies and site data in your browser settings; doing so may reset some preferences.
If one of our applications needs device features such as notifications, camera, photos, files, microphone, Bluetooth, or location, access is requested for the relevant feature through the operating system’s permission prompt. You may later disable permissions in device settings; dependent features may then stop working. Current data practices for each app are also described in the privacy section of its store listing.
Our services are generally not directed to children. If a product is intended for children, we apply additional safeguards, including age-appropriate notices and parental or guardian consent where required. Please contact us if you believe a child’s data has been processed inappropriately.
To the extent applicable, Article 11 of the KVKK gives you the right to:
The website and applications may link to third-party services. ESPO Bilişim is not responsible for the data practices of services it does not control. We recommend reviewing the relevant privacy notice before sharing information.
We may update this policy to reflect changes in our services, data practices, or applicable law. Material changes will be announced through appropriate channels, and the “Last updated” date at the top of this page will be revised.
For privacy questions or requests under the KVKK, you may submit an application explaining your identity and request through the channels below. Applications are answered within the procedures and time limits set by applicable law.