Data Controller: XNET BİLİŞİM TEKNOLOJİLERİ A.Ş., DOĞANBEY MAH. DOĞANBEY CAD. BURÇIN İŞ MERKEZİ NO:6/705 OSMANGAZİ / BURSA, 0850 307 69 07, info@xnet.net.tr (hereinafter referred to as "BulutDisk")

This Information Notice has been prepared pursuant to the Personal Data Protection Law No. 6698 ("KVKK") to inform you about the processing of your personal data obtained during your use of BulutDisk services.

1. Personal Data Processed

When you use BulutDisk services, the following personal data may be processed:

• Identity Information: Your name, surname (in encrypted form)
• Contact Information: Your email address, phone number (in encrypted form)
• User Information: Your email address, password (in encrypted form)
• Transaction Security Information: Your IP address, login and logout records, device information.
• Payment Information (For Paid Services): Your billing information (payment information is processed directly by payment providers and is not stored by BulutDisk).
• Usage Information: Your access and usage records to our service, information related to files you upload and share.
• Data Obtained Through Cookies and Similar Technologies: Data collected through cookies, pixel tags, and similar technologies during your use of our website and applications (e.g., browser type, device information, pages visited).

2. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Provision and management of BulutDisk services.
• Account creation, verification, and management.
• Improvement and enhancement of service quality.
• Provision of customer support.
• Security and detection and prevention of fraud.
• Fulfillment of legal obligations.
• Conducting marketing and promotional activities (with your consent).
• Conducting statistical analyses and reporting.

3. Transfer of Personal Data

Your personal data may be transferred to the following persons and organizations in line with the purposes stated above and in accordance with the conditions specified in KVKK:

• Service Providers: Third-party service providers from whom we receive services regarding data storage, server services, payment processing, and customer support.
• Legal Authorities: Authorized public institutions and organizations in order to fulfill our legal obligations.

4. Methods of Collecting Personal Data and Legal Grounds

Your personal data is collected through automatic and non-automatic methods such as the BulutDisk website, mobile applications, registration forms, contact forms, and cookies. The legal grounds for processing your personal data are as follows:

• Establishment and Performance of Contract: Necessity for the performance of the BulutDisk service contract.
• Legal Obligations: Fulfillment of obligations arising from legal regulations.
• Explicit Consent of the Data Subject: In cases requiring explicit consent such as marketing and promotional activities.
• Legitimate Interests: Protection of BulutDisk's legitimate interests (e.g., ensuring the security of the service).

5. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you have the following rights:

• To learn whether your personal data is being processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose.
• To know the third parties to whom your personal data is transferred domestically or abroad.
• To request the correction of your personal data if it has been processed incompletely or incorrectly.
• To request the deletion or destruction of your personal data within the conditions stipulated in Article 7 of KVKK.
• To request that the operations performed in accordance with paragraphs (e) and (f) be notified to the third parties to whom your personal data has been transferred.
• To object to the emergence of a result against you by analyzing the data processed exclusively through automated systems.
• To request compensation for damages if you suffer damage due to the unlawful processing of your personal data.

6. How to Exercise Your Rights?

To exercise your rights mentioned above, you can apply in writing to the XNET Company Address with documents verifying your identity, or via your registered electronic mail (KEP) address to destek@bulutdisk.net. Your application must clearly state your name, surname, Turkish ID number (or passport number if you are a foreigner), address, email address, and request.

7. Changes

This Information Notice may be updated from time to time. The current text will be published on the BulutDisk website.

This Information Notice has been prepared to give you general information about the processing of your personal data. For more detailed information, please review our Privacy Policy or contact us.