KVKK Privacy Notice

1. Purpose and Scope

This notice explains how personal data is processed in connection with the Beyuka corporate water operations platform (“Platform”, including Beyuka Water) under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), Article 10.

It covers website visitors, contact form submitters, pilot or commercial inquiry contacts, authorized portal and operations users, and individuals whose data is provided by enterprise customers for Platform use.

2. Data Controller

Under KVKK, the data controller is the party operating the Platform under the Beyuka brand (“Data Controller”).

You may submit requests via the contact form on our website.

3. Personal Data Categories

Depending on your relationship with us, we may process:

• Identity and contact: name, work email, phone, job title, company name.
• Customer relations: inquiry content, store count, pilot notes, meeting records.
• Account and access: email, password, role and permission data, session records.
• Security: IP address, browser and device data, access and transaction logs.
• Operational data: store, subscription, invoice and consumption data in files shared by customers, where it may identify individuals.
• Cookie data: as described in our Privacy Policy.

4. Processing Purposes

Personal data is processed to:

• Provide and operate Platform services, customer portal and operations tools.
• Run water consumption visibility, audit and reporting workflows.
• Match, validate and transform customer-supplied files into enterprise reports.
• Evaluate and respond to pilot, demo and commercial requests.
• Manage contracts, billing and customer support.
• Ensure information security and prevent unauthorized access.
• Comply with legal obligations.
• Send marketing communications where you have given consent.

5. Legal Basis

Processing is based on contract performance, legal obligation, establishment or protection of rights, legitimate interests (where they do not harm your fundamental rights), and consent where required under KVKK Articles 5 and 6.

6. Data Sharing

Data may be shared with cloud hosting, infrastructure and email providers, professional advisors where necessary, public authorities when legally required, and authorized users within customer organizations — always subject to KVKK Articles 8 and 9 and appropriate safeguards.

7. International Transfers

Some infrastructure providers may be located outside Turkey. In that case transfers rely on adequate protection, Board approval, or your explicit consent, with contractual safeguards in place.

8. Retention

Data is kept for as long as needed for the processing purpose and applicable legal periods, then deleted, destroyed or anonymized. See the Turkish notice for indicative retention periods.

9. Your Rights (KVKK Art. 11)

Under KVKK Article 11 you may request to:

• Learn whether your data is processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether it is used accordingly.
• Know third parties to whom data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction under KVKK Article 7.
• Request notification of correction or deletion to third parties.
• Object to results arising solely from automated processing.
• Claim compensation for damage due to unlawful processing.

10. How to Exercise Your Rights

You may exercise your rights by using the contact form on our website. We respond within 30 days where possible. You may lodge a complaint with the Turkish Personal Data Protection Authority under KVKK Article 14.

11. Security

We apply technical and administrative measures appropriate to available technology and implementation cost under KVKK Article 12, such as access control, secure hosting and backups, reviewed periodically as the service evolves.

12. Updates

This notice may be updated. The current version is published on this page.