Personal Data Protection
Personal Data Protection Policy for Company Representatives
Purpose
The purpose of this Personal Data Protection and Processing Policy ("Policy") is to define the terms and conditions regarding the use of personal data obtained from individuals or organizations ("Customer"), including authorized persons or other users utilizing the Internet-Based Client Information Management System ("Product") provided through schedly.net (the "Site"), which is owned by Sekizbit Bilişim ve Ticaret Limited Şirketi ("Schedly").
By accepting the Product User Agreement, the Customer is also bound by the provisions of this Policy. Any terms not defined within this Policy will be interpreted in accordance with the definitions provided in the Product User Agreement.
Which Data is Processed?
Under this section, the personal data provided by the Customer to Schedly during membership registration or obtained during the use of the Product is listed in accordance with Law No. 6698 on the Protection of Personal Data ("Law No. 6698"). Unless otherwise explicitly stated, "personal data" under this Policy refers to the following information:
- Name, surname, and identity details.
- Address, business or personal email address, and phone number.
- Passwords and similar authentication and security information used for identity verification and account access.
- Payment information.
- Product/service usage information.
- Transaction security information.
- Financial information.
Schedly may also collect information regarding the Customer's use of the Site and the Product through cookies, which are technical communication files. Cookies enable the identification of usage patterns and habits for accessing and utilizing the services provided on the Product, including the collection of IP addresses.
Data that is anonymized irreversibly in accordance with Articles 3 and 7 of Law No. 6698 is no longer considered personal data and may be processed without being subject to this Policy.
For What Purposes is Data Used?
Schedly processes personal data provided by the Customer for membership registration and the provision of services related to the Product. This data may also be used for improving services, contacting the Customer or other users licensed to use the Product, and fulfilling obligations arising from the nature of the services offered.
Schedly may use anonymized data for reporting, business development, market research, and statistical evaluations without revealing the identity of the Customer or related users. If the Customer consents, personal data may also be used for direct marketing, promotion, maintenance, and support activities.
In cases permitted under Articles 5 and 8 of Law No. 6698 or where relevant legal conditions are met, Schedly may process or share personal data without obtaining explicit consent, including:
- When explicitly stipulated by laws.
- When necessary to protect the life or physical integrity of individuals who are unable to provide consent.
- When processing is required for the performance of a contract.
- When required to fulfill legal obligations.
- When personal data has been made public by the Customer.
- When processing is required to establish, exercise, or protect legal rights.
- When processing is necessary for legitimate interests, provided it does not infringe on fundamental rights and freedoms.
Schedly may also use cookies for remarketing lists, analyzing behavior on the Product, and providing customized user experiences.
Who Has Access to Data?
The Customer has the following rights under Article 11 of Law No. 6698 and may contact Schedly to:
- Learn whether their personal data is processed.
- Request information if their data has been processed.
- Understand the purpose of processing and whether it is used appropriately.
- Know the third parties to whom data has been transferred.
- Request correction of incomplete or inaccurate data.
- Request the deletion or destruction of data under certain conditions.
- Object to the processing of data that adversely affects them.
- Request compensation for damages due to unlawful data processing.
Requests can be submitted to Schedly's address at Asmalı Mescit Mahallesi, Meşrutiyet Cd. No:105, 34430 Beyoğlu/İstanbul. Schedly may respond to requests in writing or digitally and may charge a fee based on rates determined under Article 13 of Law No. 6698.
Retention Period of Personal Data
Schedly retains personal data for the duration of services provided under this Policy and the Product User Agreement. In case of any disputes, Schedly may retain data for the statute of limitations periods defined by applicable laws.
Security Measures and Commitments
Schedly takes technical and administrative measures to:
- Prevent unlawful processing of personal data.
- Prevent unlawful access to personal data.
- Ensure the secure retention of personal data.
Schedly undertakes not to disclose personal data to third parties or use it beyond the purposes specified in this Policy and applicable laws.
Changes to the Policy
Schedly reserves the right to update, modify, or change the provisions of this Policy at any time. The updated Policy will take effect once made available to the Customer by any means.