Privacy notice

Data controller

The data controller is Firmaskor Bilgi Teknolojileri Ltd. Şti. (Firmaskor), operating at Maslak Mah. Büyükdere Cad. Meydan Sok. Beybi Giz Plaza No:1 Kat:15 Sarıyer / İstanbul, reachable at info@firmaskor.com.

Personal data processed

• Identity and contact: first name, last name, e-mail address, phone number.
• Customer transactions: workspace and team details, company records, report requests, credit movements and purchase requests.
• Billing: company name, tax number or Turkish ID number, tax office, billing address and billing e-mail address.
• Uploaded documents: company documents and the data calculated from them. Where a document belongs to a sole proprietorship or contains names, ID numbers or addresses of individuals, that information is processed too.
• Transaction security: IP address, session and device/browser information, sign-in records and audit records.

Your data is collected electronically: from you through the sign-up, document upload and purchase forms, from a colleague when they invite you, and, for transaction security data, automatically while you use the service.

Purposes and legal bases

• Opening the account, providing the service and producing reports: establishment and performance of the contract (KVKK Art. 5/2-c).
• Invoicing, accounting and tax records: compliance with a legal obligation (Art. 5/2-ç).
• Account security, preventing misuse and audit records: legitimate interest (Art. 5/2-f) and legal obligation (Art. 5/2-ç).
• Improving the service (aggregate and anonymous usage measurements): legitimate interest (Art. 5/2-f).
• Protecting rights in disputes: establishment, exercise or protection of a right (Art. 5/2-e).

Firmaskor does not share or sell your personal data to third parties for marketing. Commercial electronic messages are sent only if you give separate consent.

Transfer of personal data

Your personal data may be transferred, only to the extent needed for the purposes above, to the accountants we work with, infrastructure and technology service providers, e-invoice service providers, SMS verification and e-mail delivery providers, and, on request, to authorised public institutions.

Retention periods

• Uploaded document files: 1 year from upload.
• Company data, scores, reports and analyst commentaries: 1 year after the company is removed from the workspace.
• Service usage records: 3 years.
• Security and audit records: 10 years.
• Invoice and accounting records: the periods required by the Tax Procedure Law and the Turkish Commercial Code (up to 10 years).
• Account data: until the account is closed, then for the statutory limitation period for possible disputes.

When a period ends, the data is automatically deleted, destroyed or anonymised. Copies in backups are deleted on their own at the end of the backup retention cycle.

Data security

Connections are encrypted (TLS), passwords are stored in a non-reversible form, workspaces are isolated from each other, access is limited by roles, significant actions are written to an audit log and backups are kept encrypted.

Your rights under KVKK Article 11

• To learn whether your personal data is processed and, if so, to request information about it,
• To learn the purpose of processing and whether it is used in line with that purpose,
• To know the third parties in Turkey or abroad to whom it is transferred,
• To request its correction if it is incomplete or inaccurate, its deletion or destruction when the conditions of KVKK Article 7 are met, and that these actions be notified to the third parties it was transferred to,
• To object to a result against you arising from analysis exclusively by automated systems,
• To claim compensation if you suffer damage because of unlawful processing.

How to apply

Send your request, with enough information for us to verify your identity, by e-mail to info@firmaskor.com or in writing to Maslak Mah. Büyükdere Cad. Meydan Sok. Beybi Giz Plaza No:1 Kat:15 Sarıyer / İstanbul. Requests are concluded free of charge within 30 days at the latest, under the Communiqué on the Procedures and Principles of Applications to the Data Controller.

Information on cookies is on the Cookie policy page.