ARİMARS TEKNOLOGY SOLUTIONS INC.
PERSONAL DATA PROTECTION NOTICE
(In accordance with Law No. 6698 on the Protection of Personal Data and the EU General Data Protection Regulation – GDPR)

Definitions

In this clarification text:

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • KVKK: The Turkish Personal Data Protection Law No. 6698, effective as of April 7, 2016.
  • GDPR: The General Data Protection Regulation (EU) 2016/679, effective as of May 25, 2018.
  • Arimars: Refers to Arimars Teknoloji Çözümleri A.Ş., located at A.O.S. 55.Sok 42 Maslak Plaza A0913 Sariyer / Maslak / Istanbul / Turkey.
  • Data Controller: The natural or legal person who determines the purposes and means of processing personal data.
  • Data Processor: A natural or legal person who processes personal data on behalf of the data controller.

Data Controller

In accordance with both the KVKK and GDPR, your personal data shared in your capacity as a user, visitor, customer, job applicant, business partner, service provider and/or Arimars employee/manager will be processed by Arimars Teknoloji Çözümleri A.Ş. as the data controller.

Categories of Personal Data Processed

  • Identity information (name, surname)
  • Contact information (email, phone number)
  • Location information
  • Device and browser information
  • IP address, cookie data
  • Professional or educational background

Purpose of Processing Personal Data

Your personal data is processed in line with the principles set forth in Articles 4, 5 and 6 of the KVKK and Articles 5 and 6 of the GDPR, for purposes such as:

  • Operation and improvement of digital platforms
  • Provision of services and content
  • Execution of support processes
  • Delivery of educational content, events, promotions, and communications
  • Legal obligations and contractual requirements

Processing is carried out:

  • Lawfully, fairly, and transparently
  • For specific and legitimate purposes
  • In a way that is adequate, relevant, and limited to what is necessary

Sensitive Personal Data

Sensitive personal data (e.g., location data, health records, photos/videos) is only processed with your explicit consent, unless otherwise required or permitted by applicable laws.

Transfer of Personal Data

In compliance with Articles 8 and 9 of the KVKK and Articles 44–49 of the GDPR, your personal data may be transferred to third parties—such as suppliers, business partners, cloud service providers (e.g., Firebase, Unity, Aframe, Babylon.js), legal advisors, public authorities, and servers located outside of Turkey or the EU—only where necessary and with appropriate safeguards in place, including Standard Contractual Clauses (SCCs) or adequacy decisions by the EU Commission.

Method and Legal Basis for Collection

Your data may be collected through:

  • Online forms (web or mobile app)
  • Contact and service requests
  • Email communication
  • Cookies or tracking technologies
  • Contracts or agreements

Legal grounds for processing may include:

  • Your explicit consent (Article 6/1-a GDPR)
  • Fulfillment of contractual obligations (Article 6/1-b GDPR)
  • Compliance with legal obligations (Article 6/1-c GDPR)
  • Legitimate interests pursued by the data controller (Article 6/1-f GDPR)

Retention Period of Personal Data

Your personal data will be retained for the duration required by applicable laws or for the period necessary to fulfill the purposes stated herein. Once this period expires, your data will be deleted, anonymized, or securely destroyed unless further retention is required by law.

Rights of the Data Subject

Under Article 11 of the KVKK and Articles 12–23 of the GDPR, you have the following rights:

  • To be informed about the processing of your personal data
  • To access your personal data
  • To request correction of inaccurate or incomplete data
  • To request deletion or restriction of processing
  • To object to processing based on legitimate interests
  • To withdraw consent at any time (for processing based on consent)
  • To receive your data in a portable format
  • To lodge a complaint with a supervisory authority (e.g., Turkish Personal Data Protection Authority or your local EU Data Protection Authority)

Contact and Application Method

You may exercise your rights by sending a signed request (including your ID and contact details) to the address or email below:

Arimars Teknoloji Çözümleri A.Ş.
A.O.S. 55.Sok 42 Maslak Plaza A0913 Sariyer – Maslak / Istanbul / Turkey
Email: info@arimars.com

We will respond within 30 days from the receipt of your request, as per legal regulations.

Update

Last Updated: March 25, 2025
Please check our platforms periodically for the most current version of this Clarification Text.