Last updated: January 8, 2025
WeDo ("we", "our", or "us") provides B2B cloud services to corporate clients. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), Turkey's Personal Data Protection Law (KVKK, Law No. 6698), and applicable local laws.
1. Quick Summary — At a Glance
- •We collect: Contact details, technical data (IP address, device/browser info), and any information you share in inquiries.
- •We use it for: Responding to inquiries, improving our services, ensuring security, and fulfilling legal obligations.
- •We share it with: Trusted service providers and, where legally required, public authorities.
- •We don't: Sell or rent your data.
- •Your rights: Access, correction, deletion, objection, restriction, consent withdrawal (GDPR & KVKK).
- •Contact us: info@wedo.com.tr
2. Data Controller Information
Under GDPR and KVKK, WeDo acts as the data controller for all personal data collected through our Website.
3. Data We Collect
We may process:
- Contact details: Name, email address, phone number, company name.
- Technical information: IP address, browser type, device details, operating system, pages visited, interaction data (via cookies or similar technologies).
- Inquiry content: Any personal data you provide in forms, emails, or other communication.
We do not intentionally collect special categories of personal data unless required for a specific service with your explicit consent (as per GDPR Art. 9 & KVKK Art. 6).
4. Purpose of Processing
We process personal data to:
- Respond to and manage inquiries (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
- Operate, maintain, and improve our Website.
- Ensure information security and prevent fraud.
- Comply with legal and regulatory requirements.
5. Legal Basis for Processing
We process your data under:
- Legitimate interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)): Website operation, service improvement.
- Contract performance (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)): Responding to B2B service requests.
- Legal obligation (GDPR Art. 6(1)(c), KVKK Art. 5(2)(ç)): Compliance with legal requirements.
- Explicit consent (GDPR Art. 6(1)(a), KVKK Art. 5(1)): For non-essential cookies or certain marketing activities.
6. Cookies & Tracking
We use:
- Essential cookies: For core site functionality.
- Analytics cookies: To understand site performance.
- Preference cookies: To store your settings.
You can accept or reject non-essential cookies via the cookie banner or browser settings. You can also manage your preferences at any time by clicking the "Cookie Settings" link in the footer of our website.
7. Data Sharing
We share personal data only with:
- Service providers (hosting, analytics, security) under strict confidentiality and security obligations.
- Public authorities when required by law.
We do not transfer personal data to third parties for commercial purposes.
8. Data Storage, Security & Transfers
- Stored on secure servers within the EEA or countries with adequate data protection safeguards.
- If transferred internationally, GDPR Standard Contractual Clauses or KVKK-approved safeguards will be applied.
- Technical and organizational security measures are implemented to prevent unauthorized access, loss, or misuse.
9. Your Rights under GDPR & KVKK
General Rights
You may:
- Access your data.
- Request correction of inaccurate or incomplete data.
- Request deletion ("right to be forgotten").
- Object to certain processing activities.
- Restrict processing.
- Withdraw consent at any time (for consent-based processing).
- Request data portability (GDPR-specific).
KVKK-specific rights (Art. 11):
- Learn whether your data is processed.
- Request information about processing activities.
- Learn third parties to whom your data is transferred.
- Request rectification, deletion, or anonymization.
- Object to results arising from automated decision-making.
- Request compensation for damages due to unlawful processing.
10. Exercising Your Rights
Requests under GDPR or KVKK can be sent to info@wedo.com.tr with a clear subject line such as "Personal Data Request — GDPR" or "Personal Data Request — KVKK".
For KVKK, requests can be made:
- In writing to our registered address.
- Using the methods outlined by the Personal Data Protection Authority (KVKK).
We will respond within 30 days (GDPR) or within 30 days under KVKK.
11. Contact Information
WeDo Bilgi Teknolojileri A.Ş.