Privacy Notice (KVKK)
1. Data Controller
This Privacy Notice is prepared by Bonobo Teknoloji Çözümleri (“Bonobo”, “we”, or “Company”) in its capacity as data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It applies to visitors who interact with us through our website bonobo.com.tr, in particular those who submit a demo request or contact form (“you” or “data subject”).
Data Controller Contact Information:
- Legal name: Bonobo Teknoloji Çözümleri
- Address: Gayrettepe Mahallesi, Yıldız Posta Caddesi, Akın Sitesi 4. Blok, No: 12, D: 76, Beşiktaş / İstanbul, Türkiye
- Email: [email protected]
- Website: https://bonobo.com.tr
2. Categories of Personal Data Processed
Through our website — particularly via the demo request form and contact channels — we process the following categories of your personal data:
| Category | Content |
|---|---|
| Identity data | First name, last name |
| Contact data | Email address, phone number |
| Professional / business data | Company name, sector, current POS system, number of locations |
| Customer interaction data | Messages, questions and feedback you submit through the form |
| Transaction security data | IP address, cookies, browser and device information (collected automatically via cookies — see our Cookie Policy) |
3. Purposes of Processing
Your personal data is processed for the following purposes, within the framework of Articles 5 and 6 of the KVKK:
- Scheduling and conducting the demo session you requested
- Providing information about our products and services
- Responding to your questions and maintaining communication
- Managing customer relations
- Planning pre-sales and post-sales processes
- Improving the user experience of our website
- Fulfilling our legal obligations
- Pursuing legal claims and managing disputes (where necessary)
Your personal data will not be used for purposes other than those listed above and will not be processed for direct marketing without your explicit consent.
4. Legal Basis for Processing
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
- Article 5(1) — Explicit consent: The explicit consent you provide by submitting the demo form.
- Article 5(2)(c) — Performance of a contract: Where processing is necessary for the establishment or performance of a contract between us.
- Article 5(2)(e) — Establishment, exercise or protection of a right: Where processing is necessary for the establishment, exercise or protection of a right.
- Article 5(2)(f) — Legitimate interest: Where processing is necessary for our legitimate interests in evaluating and providing the requested service (provided that your fundamental rights and freedoms are not harmed).
5. Method of Collection
Your personal data is collected directly from you, in electronic form, through the information you enter into the form fields on our website. Additionally, transaction security data may be collected automatically through cookies during your visit (see our Cookie Policy for details).
6. Transfer of Personal Data
Your personal data may be transferred only to the following parties, only for the purposes stated above and with appropriate security measures in place:
Domestic transfers
- Service providers: Web hosting, email service, cloud infrastructure and form-platform providers (subject to adequate security measures under KVKK Article 8)
- Authorized public authorities: Where required by law
- Legal advisors and auditors: Where necessary for the conduct of legal processes
- Group companies: Only to the extent required by the purposes set out above
International transfers
Some of the service providers we use for our website infrastructure and electronic communications may have servers located outside Türkiye (e.g., cloud services, content delivery networks, security verification and font services). In such cases, your personal data may be transferred abroad in accordance with Article 9 of the KVKK, only where adequate protection is ensured and necessary safeguards are in place. For further information, please contact [email protected].
7. Retention Period
Your personal data is retained only for as long as necessary for the purposes for which it is processed and within the periods required by applicable law:
- Demo form data: Retained for a maximum of 24 months following completion of the demo process or following your request if it does not result in a customer relationship; thereafter it is deleted, destroyed, or anonymized.
- Where a customer relationship is established: For the duration of the business relationship, plus any retention periods required by Turkish Commercial Code, Tax Procedure Law, and other applicable legislation (generally up to 10 years).
- Cookie data: As stated in our Cookie Policy.
- Data subject to legal retention obligations: For the periods required by applicable law.
Once retention periods expire, your personal data is deleted, destroyed, or anonymized in accordance with Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymization of Personal Data.
8. Your Rights as a Data Subject (KVKK Article 11)
Under Article 11 of the KVKK, you have the right to apply to us and:
a) Learn whether your personal data is being processed, b) Request information about such processing, c) Learn the purpose of processing and whether it is being used in accordance with that purpose, d) Know third parties to which your personal data has been transferred, domestically or internationally, e) Request correction of incomplete or incorrect personal data, f) Request deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK, g) Request that the actions taken under (e) and (f) be communicated to third parties to whom personal data has been transferred, h) Object to a result analyzed exclusively through automated systems where it produces an outcome to your detriment, i) Request compensation for any damage suffered due to processing in violation of the KVKK.
9. How to Exercise Your Rights
You may exercise the rights listed above through one of the following methods:
- By email: Send a request to [email protected], accompanied by documents verifying your identity.
- By written (wet-signed) application: Send a signed letter, with a copy of your ID, to our company address listed above.
- By any other means specified in the Regulation on the Procedures and Principles of Application to the Data Controller.
Your application must clearly state your identity, the right you are exercising, and your justification.
In accordance with Article 13 of the KVKK, your application will be finalized within 30 days at the latest, free of charge. However, if the process incurs additional cost, a fee may be charged based on the tariff set by the Personal Data Protection Board.
If your application is rejected, our response is found insufficient, or no response is provided within the required period, you may file a complaint with the Personal Data Protection Board within 30 days of becoming aware of our response, and in any case within 60 days of your application date.
10. Changes to This Notice
Bonobo may update this Privacy Notice from time to time in line with amendments to the KVKK or changes in our business processes. The current version is always published on the relevant section of our website. For material changes, additional notification will be provided via email or website notice.
Effective date: 5 May 2026 Last updated: 10 June 2026