Explicit Consent Text

1. Data controller and contact

Pupas Teknoloji Yatırımları Danışmanlık Anonim Şirketi ("Company") is the data controller under Turkish Law No. 6698 ("KVKK").

Digital contact: [email protected]

Postal address: Barbaros Mah. Şebboy Sok. No:4/1 İç Kapı No:2, 34634 Ataşehir / İstanbul

KEP: [email protected]

2. Subject and scope of explicit consent

This text obtains your explicit consent for cross-border transfer of personal data you submit via the website, contact forms, appointment tools, email, CRM, cloud services, and similar channels.

Under KVKK Art. 9, cross-border transfer may occur via adequacy decisions, appropriate safeguards, or your explicit consent.

3. Data categories subject to transfer

Identity, contact, business/company data, request and message content, appointment data, consent records, and transaction security data may be transferred.

4. Purposes and legal basis

Purposes include handling contact, support, and business development requests; information systems security; and legal compliance.

Legal basis: KVKK Art. 5/1 (explicit consent) and Art. 9 for cross-border transfer.

5. Recipients and countries

Your data may be transferred to processors engaged by the Company in the EEA, United States, Asia-Pacific, and other regions where services are hosted.

6. Retention

Transferred data is retained for as long as the processing purpose requires, then deleted, destroyed, or anonymized.

7. Rights and withdrawal of consent

You may exercise your KVKK Art. 11 rights by contacting [email protected].

You may withdraw consent at any time. Withdrawal does not affect prior lawful processing.

8. Consent statement

I confirm that I have read and understood this text and freely give explicit consent to the cross-border transfer and processing of my personal data within the scope, purposes, recipient categories, and countries described above.