YönetimTR KVKK Notice and Privacy Policy
YönetimTR is a cloud-based software platform for businesses, offering a corporate website, content management, multilingual publishing, QR menu, digital ordering and request management, multi-channel messaging (WhatsApp, Instagram, web chat), and AI-powered assistant services.
YönetimTR is developed and provided by Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi.
This text is prepared to explain, under Law No. 6698 on the Protection of Personal Data, for what purposes your personal data is processed, with whom it may be shared, how long it may be stored, and what rights you have over your personal data.
In short: YönetimTR’s purpose is to make communication between your business and your customers easier, while explaining clearly and simply how data is processed.
1. Distinction Between Data Controller and Data Processor
Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi acts as the data controller for subscription, contract, payment, invoicing, technical support, communication, and customer relationship processes related to businesses using YönetimTR services.
For data relating to the employees, customers, website visitors, WhatsApp and Instagram conversations, QR menu requests, reservation and request records of businesses using YönetimTR, the relevant business is generally the data controller, while Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi acts as the data processor within the scope of the software service provided.
In this context, Artech processes data entered into the system by the business or created through YönetimTR by the business’s customers/employees, in line with the business’s instructions, the service agreement, technical requirements, and applicable legal regulations.
2. Data Controller Information
Title:
Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi
Address:
Şirintepe Mah. 8132 Sk. No: 20 /1 Çiğli / İzmir
E-mail:
info@artechotomasyon.com
Phone:
0534 658 89 96
3. Personal Data Processed
The following personal data may be processed while providing YönetimTR services:
- Business and account information: Business name, authorized person details, tax and invoicing information, contact information, branch information, domain name information, subscription details, payment and collection records, support requests, and contract records.
- Panel user information: Full name, username, phone number, e-mail address, job/role information, user permissions, session and login records, and transaction history.
- Website visitor and request information: Name, phone number, e-mail address, and message content submitted through the contact form; reservation or request records; order and call information sent via QR menu; and service-related information such as table/room number.
- Messaging information: Message content sent and received via WhatsApp, Instagram, and web chat, phone number, profile name and profile photo if any, username, message time, language preference, and conversation status records.
- Technical data: IP address, device information, browser information, operating system information, session records, system logs, error records, performance records, security records, and cookie data.
- Usage and billing data: AI assistant usage counters, message counts, package and quota information, subscription and payment records.
4. Special Category Personal Data
As a rule, special category personal data is not intended to be processed within the scope of YönetimTR.
Users or businesses must not enter special category personal data into the system, such as health information, biometric data, religion, sect, political views, criminal conviction, union membership, or similar sensitive data.
If, despite this, special category data is entered into the system by the business, the relevant business is responsible for processing such data and for completing the necessary explicit consent/information processes.
Important note: Unnecessary personal data, special category personal data, identity document details, payment card information, health information, or similar sensitive information should not be entered into AI systems.
5. Purposes of Processing Personal Data
Personal data may be processed for the following purposes:
- Providing YönetimTR software services,
- Running corporate website, content management, and multilingual publishing processes,
- Managing QR menu, digital ordering, and call processes,
- Forwarding contact form, reservation, and request records to the business,
- Responding to requests received via WhatsApp, Instagram, and web chat,
- Providing information and creating requests through the AI-powered assistant,
- Continuing the conversation after it is handed over by business staff (live support),
- Managing user authorization, session management, and access security,
- Usage measurement, quota tracking, and reporting,
- Running subscription, payment, invoicing, and customer support processes,
- Detecting technical errors, performance issues, security issues, and misuse,
- Improving service quality and developing the system,
- Fulfilling legal obligations,
- Responding to requests from authorized public institutions and organizations.
6. Methods of Collecting Personal Data
Personal data may be collected electronically through the YönetimTR management panel, the business’s corporate website, QR menu screens, web chat window, messaging channels such as WhatsApp and Instagram, e-mail, phone and support channels, payment, invoicing and subscription processes, cookies, log records, and technical systems.
7. Legal Grounds for Processing Personal Data
Personal data is processed based on the following legal grounds under Article 5 of the KVKK:
- Processing is necessary for the establishment or performance of a contract,
- Processing is mandatory for the data controller to fulfill its legal obligation,
- Processing is necessary for the establishment, exercise, or protection of a right,
- Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed,
- It is expressly provided for by law,
- Explicit consent of the data subject is obtained where required.
For processing that requires explicit consent, separate and clear approval is obtained. The notice does not replace the explicit consent text.
8. WhatsApp, Instagram, and the Messaging Assistant
If businesses choose to do so, YönetimTR can help handle customer requests and communicate with customers through WhatsApp, Instagram, and web chat.
Messages sent to the business line may be processed to provide information, create reservations, create requests, handle orders, manage deliveries, and carry out customer service processes.
Message content may be forwarded to the business owner’s authorized staff, the relevant employee, or the AI-powered assistant, depending on the nature of the request. Business staff may take over the conversation and respond directly.
The WhatsApp, Instagram, and Messenger messaging infrastructure is provided by Meta Platforms, Inc. Therefore, Meta’s own terms of use and privacy policies may also apply to communications made through these channels.
Data received from Meta platforms is used only for providing the service; it is not used for advertising, sold, or transferred to third parties for marketing purposes.
Address, location, room number, or similar information shared for delivery or service purposes is used only to fulfill the relevant request.
9. Use of Artificial Intelligence
YönetimTR may provide AI-powered assistant services if businesses choose to use them.
The AI assistant may be used to provide information about the business, share menu and pricing details, create requests and reservations, answer customer questions, provide multilingual communication, and perform similar functions.
Within this scope, message content, information and content defined by the business, and technical processing records may be transferred to AI service providers for the purpose of generating responses. This content is not used by the provider for model training.
AI responses are generated automatically and may contain errors; final verification of binding information belongs to the business.
10. International Data Transfers
Some technology providers used while providing YönetimTR services may have servers located outside Türkiye.
Accordingly, personal data may be transferred abroad, limited to AI service providers, messaging infrastructure providers, cloud server and hosting service providers, e-mail/SMS/communication infrastructure providers, and technical service providers.
International transfers are carried out under Article 9 of the KVKK, relevant legislation, Board decisions, and where necessary, explicit consent, appropriate safeguards, standard contractual clauses, or other transfer mechanisms предусмотрed by law.
11. Parties to Whom Personal Data Is Transferred
Personal data may be shared, to the extent necessary for the service and limited to the purpose, with the following persons and organizations:
- The relevant business using YönetimTR and its authorized users,
- staff authorized by the business,
- cloud server and hosting service providers,
- Meta messaging infrastructure providers such as WhatsApp, Instagram, and Messenger,
- AI service providers,
- e-mail, SMS, and notification infrastructure providers,
- payment and invoicing service providers,
- accounting, e-invoice, or integration service providers,
- technical support and maintenance service providers,
- legal advisors, certified public accountants, and auditors,
- authorized public institutions and organizations.
Personal data is not sold to third parties for purposes other than those stated above.
12. Retention Periods
Personal data is retained for as long as necessary for the processing purpose and for the legal retention periods required by applicable legislation.
Data whose retention period has expired is deleted, destroyed, or anonymized.
Messaging and conversation records are retained for a reasonable period for the purpose of service delivery and dispute resolution; if the business account ends, they may be retained or deleted, taking into account the contract, technical requirements, backup processes, and the periods prescribed by law.
Log, security, and transaction records may be retained for reasonable periods for security, audit, troubleshooting, and the resolution of legal disputes.
13. Data Security
Appropriate technical and administrative measures are taken to ensure the security of personal data.
In this context, the following may be applied:
- user authorization and role-based access control,
- tenant-based data isolation,
- secure session management,
- encrypted communication infrastructure,
- HTTPS use,
- logging and transaction records,
- backup processes,
- server and application security measures,
- controls to prevent unauthorized access,
- error and performance monitoring systems
Our security approach: We process data only as much as necessary, limit access, and apply the controls needed to keep the system secure.
14. Cookies
The YönetimTR management panel and websites may use cookies for session management, security, user preferences, system performance, and, where necessary, analytics.
- Necessary cookies: Required for the service to work.
- Analytics and performance cookies: May be used to improve the user experience and measure system performance.
Cookie preferences can be managed through browser settings. If necessary cookies are disabled, some services may not work properly.
15. Rights of the Data Subject
Under Article 11 of the KVKK, data subjects have the following rights:
- To learn whether their personal data is being processed,
- to request information if their personal data has been processed,
- to learn the purpose of processing and whether the data is used in line with that purpose,
- to know the third parties to whom personal data is transferred domestically or abroad,
- to request correction if personal data is incomplete or inaccurate,
- to request deletion or destruction of personal data within the scope of applicable legislation,
- to request that correction, deletion, or destruction operations be notified to third parties to whom the data has been transferred,
- to object to a result against them arising from analysis of processed data exclusively through automated systems,
- to claim compensation for damages in case of harm due to unlawful processing of personal data.
16. Request for Data Deletion
If you want your account and data deleted, it is enough to send your request from the e-mail address registered to your account to info@artechotomasyon.com. After identity verification, your request will be completed within 30 days at the latest; your account records, conversation records, and linked messaging account record will be deleted.
If you are an end user who wrote to a business via WhatsApp, Instagram, or web chat, your messages are processed on behalf of the business you contacted. You may send your deletion request directly to the relevant business or write to the address above; your request will be forwarded to the relevant business.
Billing and accounting records that must be retained by law will continue to be stored for the legal period.
You can remove the messaging account connection from the management panel at any time. When the connection is removed, your number is disconnected from the platform and no new messages will be received.
17. Application and Contact
You can submit your requests under the KVKK through the following contact channels:
Artech Yazılım Otomasyon Bilişim Sanayi ve Ticaret Limited Şirketi
Address:
Şirintepe Mah. 8132 Sk. No: 20 /1 Çiğli / İzmir
E-mail:
info@artechotomasyon.com
Phone:
0534 658 89 96
Your applications are completed as soon as possible and within 30 days at the latest, depending on the nature of the request.
18. Policy Changes
This text may be updated from time to time due to changes in legislation, updates made to YönetimTR services, or changes in business processes.
The current text becomes effective as of the date it is published on the YönetimTR website or relevant platforms.
Summary
- YönetimTR provides websites, QR menus, and multi-channel customer communication for businesses.
- Data may be processed for service delivery, support, security, and legal obligations.
- In WhatsApp, Instagram, and AI-powered processes, relevant providers may be involved.
- Data received from Meta is not used for advertising and is not sold.
- Data is stored for as long as needed, then deleted, destroyed, or anonymized.
- You can contact Artech for your KVKK rights and deletion requests.
Last Updated: 05-08-2026