Corporate Legal & Compliance

KVKK & GDPR Privacy Notice

Last Updated: August 14, 2026 | Version: 2.1 (Corporate)• SSL / TLS 1.3 Encrypted

Pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”) and Articles 13 & 14 of the EU General Data Protection Regulation (“GDPR”), this Corporate Privacy Notice is issued by Synapse Soft Software Technologies (“Synapse Soft” or “Data Controller”) to fulfill our mandatory disclosure obligations regarding personal data processing.

These legal documents are established by Synapse Soft Software Technologies (“Company”) to govern corporate services, enforce intellectual property protections, and ensure strict regulatory and data privacy standards. They constitute legally binding agreements.

1. Identity of the Data Controller

Your personal data is processed by Synapse Soft Software Technologies acting in its capacity as Data Controller, in full compliance with KVKK No. 6698, associated secondary legislation, and GDPR mandates. Official compliance inquiries may be addressed to kvkk@synapsesoft.studio.

2. Data Categories & Collection Methods

Personal data is collected automatically or semi-automatically via our web platform (synapsesoft.studio), demo submission workflows, corporate email correspondence, and web server infrastructure logs:

Identification Data: First name, last name.
Contact Data: Corporate email address, telephone number, corporate location.
Professional & Institutional Data: Represented company/institution, job title, department.
Inquiry & Scoping Data: Selected software modules (DigiVal VMS, Integrations, Custom SaaS), chosen deployment architecture, and project scope notes.
Security & Connection Telemetry: IP addresses, port identifiers, access timestamps, and browser user-agent strings.

3. Purposes of Processing & Statutory Bases

Personal data is processed strictly in accordance with statutory grounds specified in KVKK Article 5 and GDPR Article 6:

Contract Formation & Execution (KVKK Art. 5/2-c, GDPR Art. 6/1-b): Generating corporate software proposals, provisioning tailored sandbox demo environments, and executing service agreements.
Legal & Regulatory Mandates (KVKK Art. 5/2-ç, GDPR Art. 6/1-c): Maintaining statutory internet traffic and access logs under Law No. 5651.
Legitimate Interests of the Controller (KVKK Art. 5/2-f, GDPR Art. 6/1-f): Ensuring cybersecurity integrity, auditing network resilience, filtering fraudulent inquiries, and monitoring uptime.
Explicit Consent (KVKK Art. 5/1, GDPR Art. 6/1-a): Operating opt-in technical analytics or communications (disabled by default).

4. Authorized Recipients & Transfers

To accomplish the aforementioned purposes, personal data may be shared with certified infrastructure and cloud hosting partners located within the EU (Frankfurt GCP) and domestic facilities, as well as competent statutory and judicial authorities when legally compelled. Synapse Soft strictly prohibits the commercial sale or unauthorized dissemination of any customer data.

5. Technical & Organizational Safeguards

Pursuant to KVKK Article 12 and GDPR Article 32, Synapse Soft enforces robust protective safeguards:

TLS 1.3 protocol enforcement, Web Application Firewalls (WAF), and scheduled penetration assessments.
Strict Role-Based Access Control (RBAC) with mandatory Multi-Factor Authentication across all database administrative tiers.
Executed nondisclosure agreements with all personnel and comprehensive data protection training.

6. Statutory Rights of the Data Subject

Pursuant to KVKK Article 11 and GDPR Chapter III, data subjects may exercise the following rights:

To ascertain whether personal data concerning them is being processed,
To request information if personal data has been processed,
To understand the purpose of processing and verify adherence to stated objectives,
To know third-party recipients domestically or internationally,
To demand rectification of incomplete or inaccurate records,
To request erasure or destruction under statutory prerequisites,
To object to outcomes derived exclusively through automated processing systems,
To seek statutory compensation for damages suffered due to unlawful processing.

7. Application Procedure & Channels

You may convey your formal applications regarding the aforementioned rights via email from your verified corporate address to kvkk@synapsesoft.studio or in writing to our registered offices. All inquiries will be resolved free of charge without undue delay and at the latest within thirty (30) days.