KVKK Information Notice

Last updated: 20 June 2026

B2BPro Yazılım ("B2BPro" or "the Company"), as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"), processes your personal data within the scope and for the purposes described below. This notice is intended to inform individuals who visit our website, complete our contact/demo forms, and use our services.

For the dealer, customer and employee data that our customers (companies) process on the B2BPro platform, the relevant customer company is the data controller; B2BPro processes such data only as a "data processor" acting on the customer's instructions.

1. Data Controller

• Entity: B2BPro Yazılım
• Address: Nispetiye Cad. Akmerkez B Kule Kat:8, Etiler Beşiktaş, 34330 İstanbul
• Email: [email protected]
• Phone: +90 (850) 885 0 890

2. Personal Data We Process

• Identity: first name, last name.
• Contact: phone, email, your company/title.
• Request/transaction content: messages, requests and feedback you share in forms and correspondence.
• Transaction security: IP address, browser and device information, pages visited, cookie and log records.
• Customer transactions: data arising from contracts, orders, invoices and support requests.

Our services are intended for businesses; we do not knowingly collect data from children. In payment transactions, card details are not stored by B2BPro; the payment step takes place on the infrastructure of licensed payment institutions that hold the relevant security standards.

3. Purposes of Processing

• To evaluate your demo and contact requests and to reach out to you,
• To provide quotes and to carry out contract, setup and service-delivery processes,
• To manage technical support, billing and customer-relations processes,
• To ensure service quality and information security and to prevent misuse,
• To fulfil legal obligations and respond to legal requests,
• Where you have given explicit consent, to send informational and promotional messages about our services.

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds under Article 5 of the KVKK:

• Being directly related to the conclusion or performance of a contract (Art. 5/2-c),
• Compliance with the Company's legal obligations (Art. 5/2-ç),
• Being mandatory for the establishment, exercise or protection of a right (Art. 5/2-e),
• Being necessary for our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f),
• Your explicit consent in cases such as promotional/informational messages (Art. 5/1).

5. Method of Collection

Your personal data is collected through forms on our website, email, phone and similar channels, as well as cookies and server logs, by automated and non-automated means.

6. Transfer of Personal Data

Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your data may be transferred to:

• Our service providers such as hosting, email, infrastructure and analytics,
• To the extent required by the service, our business partners (banks, payment institutions, ERP/accounting and shipping integration providers),
• Authorised public bodies and judicial/administrative authorities upon request,
• Parties from which we receive legal advice and audit services.

Transfer abroad: Some of the cloud, email or analytics providers we use may have servers located abroad. In such cases, transfers are carried out under the conditions set out in Article 9 of the KVKK and with the necessary safeguards in place.

7. Retention Period

Your personal data is retained for as long as required by the processing purpose and the statutory retention periods set out in the relevant legislation. At the end of these periods, your data is deleted, destroyed or anonymised.

8. Your Rights as a Data Subject

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties to whom data is transferred at home or abroad,
• Request correction of incomplete or inaccurate data, and deletion or destruction where conditions are met,
• Request that these actions be notified to the third parties to whom data was transferred,
• Object to a result against you arising solely from automated analysis,
• Claim compensation for damages arising from unlawful processing.

9. Applications

You can submit your requests regarding your rights to [email protected] or to the postal address above. Your request will be concluded free of charge within 30 (thirty) days at the latest, depending on its nature; if the process requires an additional cost, a fee may be charged in line with the tariff set by the Personal Data Protection Board.