INFORMATION NOTICE

ON THE PROCESSING OF PERSONAL AND SPECIAL CATEGORY PERSONAL DATA

This information notice has been prepared by Prove ID ("Data Controller") within the scope of the Personal Data Protection Law No. 6698 ("Law") in order to inform you about the purposes for which your "personal and special category personal data" ("Personal Data") are processed, to whom they are transferred, the methods by which they are collected, and the rights you have.

1. Purposes of Processing Personal Data

Your data are processed for the following purposes:

Execution of identity verification and biometric verification processes
Provision, improvement, and ensuring the security of services
Establishment, performance, and management of contracts
Customer relationship management, support, and communication activities
Fulfillment of legal obligations (e.g., invoicing, official requests)
Marketing and promotional activities (with your explicit consent)
Conducting demo/test processes
Resolution of possible disputes and protection of rights

2. Personal Data Processed

Within the scope of our services, the following personal data may be processed:

Identity data:

Name, surname, date of birth, ID number, ID photo, ID signature, gender, nationality, mother's name, father's name, data on ID document

Contact data:

E-mail, phone number, address information

Biometric data (with explicit consent):

Face image, voice recording, biometric signature

Device and technical data:

IP address, device model, browser information, transaction logs

Usage data:

Website, mobile application, WebSDK, and customer portal activities

Documents:

Signature circular, Turkish Trade Registry Gazette, and uploaded additional documents

3. Method and Legal Grounds for Collecting Personal Data

Your personal data are collected either automatically (via application, website, portal) or non-automatically (support requests, contracts, events).

Legal grounds:

Explicit consent (Article 6-3-a of the Law)
Establishment and performance of contracts
Protection of our legitimate interests
Fulfillment of legal obligations
Protection of vital interests (e.g., security)

4. Transfer of Personal Data

Domestic transfer:

May be shared to a limited extent with our service providers (hosting, software, security, CRM, e-mail services, etc.).

International transfer:

In cases where you give explicit consent or where there is a legal requirement, transfer may be carried out with appropriate security measures in place.

Official authorities:

May be shared with competent public authorities in line with legal requests.

5. Data Retention Period

Consent-based data: Until consent is withdrawn or the purpose of processing ceases,

Contract-related data: During the term of the contract and for 10 years thereafter,

Demo/test data: Maximum of 2 years,

Legal obligations: For the periods stipulated in the legislation.

Note: At the end of these periods, data will be securely deleted or anonymized.

6. Your Rights

Pursuant to Article 11 of the Law, data subjects have the right to:

Learn whether personal data are being processed,
Request information if personal data have been processed,
Learn the purpose of processing personal data and whether they are used in line with that purpose,
Know the third parties to whom personal data are transferred domestically or abroad,
Request correction of personal data if they are incomplete or inaccurate,
Request deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the Law,
Request notification to third parties to whom personal data have been transferred of actions carried out under Articles 5 and 6 of the Law,
Object to the emergence of a result against the person by means of analysis exclusively through automated systems,
Request compensation in case of damage due to unlawful processing of personal data.

In order to exercise these rights, data subjects may apply to the Data Controller in writing or through other methods determined by the Personal Data Protection Board. Applications will be concluded as soon as possible, and in any case within 30 days at the latest, depending on the nature of the request.

7. Contact

To exercise your rights or for your inquiries, you may:

Fill in the contact forms on https://proveid.io/, https://test.proveid.io/, or www.techsign.com.tr,
Send an e-mail to info@techsign.com.tr,
Submit a written application to the company address specified below.

8. Identity of the Data Controller

Techsign Bilgi Teknolojileri Yazılım Sanayi ve Ticaret A.Ş. ("Prove ID")

Address:
Teknopark No:1/1C, Ofis: 1301
34906 Istanbul/Turkiye

Web: https://proveid.io

E-mail: info@techsign.com.tr