Personal Data Protection & Privacy Notice

As İkago, in order to perform our human resources and process management cloud platform services, we process the personal data of our users and customers within the scope and principles of Law No. 6698 on the Protection of Personal Data ("KVKK") and GDPR standards.

With high priority on the security of your personal data, privacy of personal life, and fundamental rights and freedoms, we wish to inform you in accordance with Article 10 of KVKK.

Any personal data obtained within the scope of our business relationship will be recorded, stored, updated, disclosed to third parties where legally permitted, transferred, classified, and processed in full compliance with the law.

Principles of Personal Data Processing

As İkago, we adhere to the following principles:

• a) Processing in accordance with law and good faith,
• b) Ensuring accuracy and keeping data up-to-date,
• c) Processing for specific, explicit, and legitimate purposes,
• d) Being relevant, limited, and proportionate to the purposes of processing,
• e) Retaining data for the period stipulated in applicable legislation or necessary for the purpose of processing.

Data We Collect and Purposes of Processing

Personal data refers to any information relating to an identified or identifiable natural person. We may collect your data through your use of İkago services or your interactions with İkago representatives.

Categories of data collected may include:

• Identity and Contact Data: Name, surname, email address, phone number, corporate title, postal address.
• Customer and Transaction Data: Service requests, support tickets, billing records, order history, and platform activity logs.
• Financial Data: Bank account/payment information processed securely for billing and fraud prevention.
• System and Transaction Security Data: IP addresses, browser types, session logs, operating system info, and access timestamps.
• Marketing and Analytics Data: Usage preferences, survey responses, cookie records, and marketing campaign interactions.
• Audio/Visual Data: Recordings of customer support or demo meetings conducted with prior notice.

Your data is processed for the following purposes:

• Providing and personalising customer support and platform onboarding,
• Executing subscription agreements, account provisioning, and transaction processing,
• Ensuring information security, preventing unauthorized access and fraudulent activities,
• Improving and developing new features for İkago cloud HR modules,
• Fulfilling legal obligations and responding to official inquiries by authorized authorities.

Methods and Legal Grounds for Data Collection

Your personal data is collected via digital forms, contact channels, cookies, automated system integrations, and contractual documentation based on legal grounds specified in Article 5 of KVKK: explicit consent, necessity for contract formation/execution, compliance with legal obligations, establishment or protection of legal rights, and legitimate interests of our company without prejudice to fundamental rights.

Transfer of Personal Data

We do not sell, rent, or trade your personal data. Personal data may only be transferred to:

• Cloud hosting, server, and data storage infrastructure providers,
• Banks and payment gateways for financial transactions,
• Legal, auditing, and tax consultants for compliance and defense of rights,
• Competent public institutions and legal authorities upon lawful request.

Data Security and Protection Measures

İkago implements comprehensive technical and organizational security measures in line with ISO/IEC 27001 Information Security Management System standards, the KVKK Security Guide, and GDPR standards. Data is protected with SSL/TLS encryption, robust database hashing, and strict role-based access control.

Your Rights Under KVKK Article 11

As a data subject, you have the right to learn whether your data is processed, request information if processed, learn the purpose of processing, know third parties to whom data is transferred, request correction of incomplete/inaccurate data, request deletion or destruction of data under statutory conditions, and claim compensation for damages in case of unlawful processing.

How to Exercise Your Rights

You can submit your requests with identity verification by written notice to our headquarters at Gebze Technical University Technopark Cumhuriyet Mah. Sisecam Yolu Sk. No: 44 Gebze / Kocaeli, Turkey, or by email to info@ikago.com.tr with secure digital signature.

Response Time

Requests will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest.

Last updated: September 16, 2026