Introduction

This policy is intended to help you understand:

• How we collect information about you
• What information we collect and what we do with that information

We and us refer to Köstebek Teknoloji. We offer a wide range of products, including our cloud and downloadable products. We refer to all of these products, together with our other services and websites as "Services" in this policy.

We use information collected about you to provide and improve Services.

By using Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, do not access or use our Services or interact with any other aspect of our business.

Any information collected about you is only used for the purposes indicated within this             policy. With the exceptions listed below we respect your privacy and we do not disclose any               information about you (including your email address) to any third-party unless its disclosure            is required by law.

Our Services do not address anyone under the age of 16 ("Children"). We do not knowingly               collect personally identifiable information from anyone under the age of 16. If you are a               parent or guardian and you are aware that your Children have provided us with information               about them, please contact us. If we become aware that we have collected information about Children, we take steps to delete that information.

We may change this policy from time to time. If we make any changes, we will notify you by                   revising the “Last Update” date at the bottom of this policy and, in some cases, where appropriate we may provide you with an additional notice (such as adding a statement to the login screen or sending you an email notification). We encourage you to review this policy whenever you use our Services to stay informed about our information practices and the ways you can help protect your privacy.

How we collect information about you?

We collect information about you:

• Via our Website,
• When you use our downloadable products,
• When you use our cloud products,
• When you provide it directly to us (e.g. in email correspondence)

As a Third Party Applications Vendor listed at Atlassian Marketplace we may be given access to your information provided by you when installing our application from Atlassian Marketplace like your name and email address, and any content you choose to use in connection with our applications. If you are a technical or billing contact listed on an Atlassian account, we may be given access to your details upon installation of our products.

What information we collect and what we do with that?

Website

We collect anonymous website (via ​www.kostebekteknoloji.com and related sites) usage statistics. We also use HTTP cookies to collect information about how you navigate through our Website. We use such information to improve our Website usability and the cookies are anonymous, i.e. they are not linked with the data entered via the website. You can safely disable cookies on our Website.

Downloadable Products

Downloadable Products may have an option to collect usage statistics and transfer them to our servers in order improve future versions of our products. The information transferred does not contain any personally identifiable information. If a product has this capability it also has a configuration option to turn off statistics collection. If a product has not this capability, we do not collect any data from your usage.

Cloud Products

Cloud Products Security

Cloud Products are hosted and delivered by Amazon Web Services (AWS). AWS is responsible for the security of its actual data centers and the AWS cloud. Köstebek Teknoloji is responsible for monitoring, managing and securing the Cloud Products. Köstebek Teknoloji Cloud Products data is hosted on AWS servers in the United States. Cloud Products data at rest is encrypted following industry standards and all communications with the Cloud Products are protected with HTTPS using TLS. Amazon Web Services manages the security of the Cloud. AWS has been certified by third-party organizations, and manages many compliance programs to comply with laws and regulations (including GDPR). Within K,stebek Teknoloji only a few trusted members of its staff have access to the production environment for the purposes of maintaining Cloud Products and assisting its customers. Additionally, Köstebek Teknoloji monitors all access to our Cloud Products.

Service related communication

We use your contact information to send transactional communications via email and within Services, including onboarding emails, reminding you of subscription expirations, responding to your questions, requests and comments, providing customer support, and sending you updates, technical notes and security alerts. We also send you email notifications when our customer support team interacts with you on Services. These communications are part of Services and in most cases you cannot opt out of them. If an option out is available, you will find that option within the communication.

Marketing

We may use your contact information and information about how you use Services to send promotional communications that may be of specific interest to you. These communications are aimed at driving engagement and maximizing what you get out of the Services, including information about new features and products, survey requests, newsletters, and events we think may be of interest to you. If we do so, you will find an opt-out within the communication.

Only with your consent

We may use information about you where you have given us consent to do so for a specific purpose not listed above. For example, we may publish “Success story” to promote our Services, with your permission.

Third party tools used

Currently we are working with the following third-party service providers:

Amazon Web Services

The data of Users using Cloud Products are stored on servers of Amazon Web Services. Please review Amazon Web Service Privacy Policy on: ​ https://aws.amazon.com/privacy/

International data transfers

Our Services may be provided using resources and servers located in various countries around the world, including the U.S. and other countries. For example, our website is hosted on servers in the TURKEY. Your information may be transferred and processed by third-parties outside the country where you use our Services, including to countries outside the European Economic Area (EEA), where the level of data protection may not be deemed adequate by the European Commission (i.e., where you have fewer rights in relation to your information). We expect that our third-party service providers will comply with the terms of the European Union’s General Data Protection Regulation (GDPR), and that any international data transfers be made under a recognized basis such as the US-EU Privacy Shield, EU Standard Contractual Clauses, and/or Binding Corporate Rules. If you wish to know more about international transfers for your personal data, you may contact us as specified below.

Your Rights

You have the following rights concerning your personal information:

• To review, change, or delete to your personal information,
• To object to direct marketing,
• To ask about how we are processing your personal information,
• To restrict our processing of your personal information,
• To have a copy of your personal information,
• To transfer your personal information from us to another person or business.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using our Services. Should you wish to exercise any of your rights, or should you have any questions concerning your rights, please contact us using the information in Contact Us section. We will respond as soon as possible.

Data Retention

We retain your personal information for the length of time required for the specific purpose or purposes for which it was collected. We may be obliged to store some data for a longer time, for example, where a longer time period is required by applicable law. In this case, we will ensure that your personal information will continue to be treated in accordance with this Privacy Policy.

For any questions or notices, please contact us at: 

Address :        Cyberpark, Cyberplaza B Blok Kat:2 No:B232 Bilkent Çankaya/Ankara Türkiye

Tel :                +90 312 909 13 17

Email:            info@kostebekteknoloji.com 

...

Effective Starting Date: December 14, 2021

General Information

Köstebek Teknoloji, (“Köstebek”, “we”, “us” or “our”) is committed to preserving the privacy of people with who we come into contact, (collectively “You” or “Your”) and applies to the information we obtain through use of our websites, services/products subscription (free and paid), marketing campaigns (e.g., events and webinars or any other similar communications) or whenever you interact with Köstebek, you consent to the collection, use and transfer of your information under the terms of this policy.

When we collect, receive, store and use your personal information, we do so in accordance with the rules set down by the European Union General Data Protection Regulation (EU) 2016/679 (the GDPR) and Turkish laws.

We also apply these principles to the way we collect, store and use the personal information of our clients outside EU.

This Policy describes how personal information is collected, for what purposes it is collected, how we share it, how we handle the content you place in our products and services, and the steps we take to secure this information.

Contents

What information do we collect

We can collect the following information about you:

• Contact information such as name, email address, phone number, country, city

• Profile information such as job title, company or other business information

• Pictures: photos

• Billing information such as tax ID

• Software preferences, including software use and interests

• User web behavior

• IP addresses, URLs visited, and related information

• Cookies (see our Cookies policy)

• Education and work experience

• Usage data and information about the systems running our products.

We may collect these types of personal information directly from you or from third parties.

Where do we collect information

We, and our service providers, collect personal information in a variety of ways. If you choose not to provide us with personal information when requested, we may not be able to provide you with the information and/or services you have requested or otherwise fulfill the purpose(s) for which we have asked for the personal information. Aside from this, your visit to our websites will remain unaffected. When we collect your personal information, we will let you know why we are collecting it and how we will use the information.

We collect data, including Personal Data, from a variety of sources depending on the nature of the Services you use or Interaction you have. Sources may include:

• Your direct submission: You may provide information to us via one of our Services or via Interactions. This may unstructured information (such as that in an email) or a response to a survey, web-form, or other data gathering mechanism.

• Indirectly via your use: We may collect information from you in the course of your using Services or our providing services to you. For example, we may observe your actions on one of our websites.

• From Third Parties: We may be provided, or collect, information from various third parties with whom we may contract, or share an integrated service, in connection with our Services.

  • (a) third party vendors that help us build or supplement contact lists or information, for example webinar platforms or market intelligence providers; and

  • (b) third parties that help us verify records or enrich information we capture about you; and

  • (c) third party providers of services (such as online recruiting services) whereby information is sent to us automatically or via request; and

  • (d) transactional information from third parties, including information regarding your purchases or evaluations of any of our Services. This may include data from companies such as Atlassian (via Atlassian Marketplace or other means).

Please note that we use the following third parties to process your personal information:

• Atlassian

• Google

• Hubspot

• Digital Ocean

• Amazon Web Services (AWS)

By providing us with personal information, you consent to the disclosure of your personal information to third parties who reside outside EU.

Information Sharing and Disclosure

• We will not share or disclose any of your Personal Data with third-parties except as described in this policy.

• We do not sell your Personal Data. We will never provide your Personal Data to any third-party, without your previous consent, that does not, at least, the same level of for your Personal Data similar to the one we have. We ensure that the necessary procedures are in place to preserve your legal rights over your Personal Data.

• Social Media Features: Our websites include social media features, such as the “Facebook” Like button and widgets, the “share this” button and/or other interactive mini-programs that run on our sites. Social Media Features and Widgets are either hosted by a third-party or hosted directly on our Websites. This Privacy Policy does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them.

• Links to third party sites: Our websites may include links to other websites whose privacy practices may differ from ours. If you submit Personal Data to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.

• Testimonials: We may display personal testimonials of satisfied customers. With your previous consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at anytime.

• With your previous consent: We will share your Personal Data with third-parties only when we have your consent to do so.

• We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights or to comply with a law, court order, or legal process, but as far as is legally possible, we will inform you about such disclosure terms.

How do we use the information collected

• When we use your personal information, it will be (a) with your consent, or (b) for one of two basic purposes: (1) to operate our business and provide (including improving and personalizing) the products we offer, and (2) to send communications, including promotional communications.

  Operating our Business. We use your information to provide and improve the products we offer and perform essential business operations. This includes operating the products, maintaining and improving the performance of the products, developing new features, conducting research, evaluating your suitability for employment opportunities, and providing customer support. Examples of such uses include the following:

• Providing the Products. We use your information to carry out your transactions with us and to provide our products to you.

  • Customer support. We use your information to diagnose product problems, and provide other customer care and support services.

  • Product Improvement. We use your information to continually improve our products, including adding new features or capabilities.

  • If you provide payment information, we use such information solely to collect payment from you. We use a third-party service provider to manage credit card processing.

  • Security, Safety and Dispute Resolution. We use your information to protect the security and safety of our products and our customers, to detect and prevent fraud, to confirm the validity of software licenses, to resolve disputes and enforce our agreements.

  • Employment Opportunities. We use your information to evaluate your suitability for employment or recruitment opportunities.

  • Business Operations. We use your information to develop aggregate analysis and business intelligence that enables us to operate, protect, make informed decisions, and report on the performance of our business.

  • Legal Obligations. We use your information as required by law.

  • We use your information to communicate with you and personalize our communications with you.

• If your consent is the basis for our use of your personal information, then you have the right to withdraw your consent at any time. If you wish to withdraw consent, please email us in accordance with the “Contacting Us” section.

Personal Data of minors

Köstebek Teknoloji products and services are not directed to individuals under 16 years old.

If we become aware that a child under 16 years old has provided us Personal Information, we will delete that information. If you become aware a child has provided us with their Personal Information, please contact us immediately.

How we protect your information

• At Köstebek, we are committed both to ensuring the privacy of the personal information that we may hold and also to complying with any applicable legislation regarding the privacy of data. Therefore, we maintain a set of physical, technical and organizational safeguards to protect any personal data collected or processed against its accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to, as well as against any other form of illicit treatment:

  ·    We protect the security and privacy of your information while in transit and at rest, by using appropriate encryption protocols and software;

  ·    We periodically review our information security and privacy practices, procedures and technologies, to guarantee that these remain adequate and appropriate to the purposes described in this notice;

  ·    We maintain a thorough information security and privacy awareness program, to ensure that all personnel are knowledgeable of the importance of the confidentiality, integrity, availability and privacy of your information;

  ·    Access to personal information is restricted to only those employees and third-party service providers who require such information to perform their job duties. Nonetheless, anyone working in or with Köstebek is subject to strict contractual confidentiality obligations and to administrative disciplinary actions if they fail to meet these obligations.

  Despite all these precautions, failures may occur as no security measure is 100% reliable. In case of failure, we will make the necessary provisions to notify you and guide you through the steps to remain protected, in accordance with the applicable legislations and the conditions established by the competent data supervisory authority.

Data subject rights

Within the limits established by applicable laws or regulations, data subjects are wholly entitled to exercise their rights regarding the personal information that Köstebek may hold about them. Data subject rights include the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability and the right to object, as described in the European Union's General Data Protection Regulation (EU GDPR).

If you would like to exercise any of your rights, you must make a request, in writing, either by email to the address compliance@kostebekteknoloji.com or by sending a registered letter to the postal address described in the contacts section of this Privacy Policy Statement. We will make reasonable attempts, at no cost, to promptly respond to your request as may be required by applicable law. If such request cannot be handled within a reasonable time frame or is, for any reason, denied, Köstebek will provide you with an explanation for such outcoming.

You may also unsubscribe from any Köstebek' mailing list for which you have subscribed or registered to, by following the instructions given along with each newsletter or other contact of the nature.

In situations where you have concerns about how Köstebek processes your personal information or disagree with Köstebek' privacy practices and procedures, your right to lodge a complaint with the appropriate data protection authority is also assured.

Transactional and Commerce Data

Data regarding any orders / purchases for use of our Services is referred to as Transactional and Commerce Data. This includes (but is not limited to) orders / purchases of:

• licenses to use our software (including products) in whatever form,

• licenses to use 3rd party software, or services, sold through Köstebek.

Transactional and Commerce Data may be provided to us via your placing an order on the phone, via 3rd party marketplace facilities such as the Atlassian Marketplace, our website, officially authorized 3rd party partners or representatives, or other sources.

When placing orders / making purchases, it is important to note and agree to any terms and conditions imposed by third parties, such as Service Providers with whom we may be working to facilitate the order or purchase.

Cookies

Cookies help us enhance your experience when using both our website and blog. The cookies used by Köstebek' Web platforms are to collect information about how visitors use our platforms (such as which pages are most popular, or the amount of time spent of each page), so that we can improve our platforms and better serve our visitors.

Some cookies we use are from third-party companies, such as Hubspot Analytics. These are set by an entity other than Köstebek, for the purpose of providing us with information on user behaviour (e.g. the pages you visit, the links or buttons you click, or the time spent on our platforms). Such cookies are only valid for as long as you remain on Köstebek' Web platforms.

To learn more about our analytics collection, please see our /wiki/spaces/MAR/pages/3078094849.

Changes to the Privacy Policy

When we update this Privacy Policy, we will revise the update date at the top of this page. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy. Your use of the services following these changes means that you accept the revised Privacy Policy.

Contact us

Köstebek Teknoloji is committed to working with you to ensure compliance with all applicable laws and regulations concerning the protection of Personal Data. Should you wish to exercise any of the rights outlined in this Policy, or have further queries with regards to this Policy, please note that you can contact us through:

Email – compliance@kostebekteknoloji.com

Phone Number: +90 505 451 34 47

Address – Yıldız Teknik Üniversitesi Teknopark B1 Blok 408 YTÜ-Davutpaşa Kampüsü, Esenler - İstanbul

We will answer to your request within 30 days and notify you of the action we have taken.