SupportSales:
PhiShark Logo
← Legal & Trust Center

KVKK Information Text

This Information Text has been prepared to provide information about the personal data processing activities carried out by PHISHARK TEKNOLOJİ ANONİM ŞİRKETİ ("PhiShark") as the data controller, within the scope of Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and relevant legislation.

In activities where PhiShark acts as a data processor on behalf of and in accordance with the instructions of another data controller, the information text of the relevant data controller and applicable contractual arrangements are taken as basis.

1. Data Controller

PHISHARK TEKNOLOJİ ANONİM ŞİRKETİ Cevizli Mah. Zuhal Cad. Ritim Istanbul Sitesi A5 Blok No:46E İç Kapı No:179 Maltepe/İstanbul Tax Office / Tax Number: Kartal V.D. – 729 137 4297 MERSIS: 0729137429700001

2. Purposes and Legal Reasons for Processing Personal Data

PhiShark, your identity, contact, account, subscription and transaction information depending on the products and services you use; your technical usage and security data; URL, domain name, e-mail, link, PDF, QR and similar contents transmitted for security analysis; may also process your support and contact records.

This personal data;

  • creating your account and providing PhiShark services,
  • Carrying out subscription, payment and billing processes,
  • Analyzing phishing, abuse and other cyber security threats,
  • ensuring system and service security,
  • meeting customer support requests,
  • fulfillment of legal and financial obligations and
  • Establishment, use or protection of legal rights

is processed for its purposes.

These transactions are included in Article 5 of the KVKK, depending on the nature of the activity;

  • being directly related to the establishment or execution of a contract,
  • It is mandatory for the data controller to fulfill its legal obligation,
  • Data processing is mandatory for the establishment, exercise or protection of a right and
  • Data processing is mandatory for PhiShark's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the person concerned.

based on legal reasons.

In separate processing activities where explicit consent is required by law, personal data is processed only if valid explicit consent is obtained.

PhiShark services are not designed to collect sensitive personal data. If it becomes necessary to process such data, the transaction is carried out only provided that one of the appropriate processing conditions stipulated in Article 6 of the KVKK is met and the necessary technical and administrative measures are taken.

For more general information regarding the processing of personal data, you can review the Global Privacy Statement.

3. Method of Collection of Personal Data

Personal data; PhiShark is obtained electronically, in whole or in part, by automatic means, through the website, platform, APIs, browser and e-mail plug-ins, support and communication channels, payment and technical integrations, and the contents transmitted for analysis.

4. Transfer of Personal Data

Personal data, provided that it is necessary and proportionate for the relevant processing purpose;

  • to cloud, hosting, technical infrastructure and security service providers for the purpose of operating the services;
  • to AI and cyber security service providers for the purpose of performing security analyses;
  • to payment and financial service providers for payment and billing processes;
  • to relevant service providers for the purpose of carrying out support and communication services;
  • to lawyers, financial advisors and other professional advisors for the purpose of fulfilling legal and financial obligations or protecting rights; and
  • To authorized public institutions, courts and other competent authorities if required by law

It can be transferred in accordance with the conditions specified in Article 8 of the KVKK.

Transfer Abroad

Personal data may be transferred abroad because some of the infrastructure, cloud, AI or technical service providers we use are located abroad.

Transfers abroad are in accordance with Article 9 of the KVKK; It is carried out by providing an adequacy decision or, in cases where there is no adequacy decision, one of the appropriate safeguards provided for in the Law. Where appropriate, standard contracts published by the Personal Data Protection Board can be used.

In cases where the conditions stipulated in the Law are not met, regular international data transfer is not carried out.

5. Your Rights Under KVKK

By applying to PhiShark in accordance with Article 11 of the KVKK:

  • learning whether your personal data is being processed;
  • If it has been processed, request information about it;
  • To learn the purpose of processing and whether it is used in accordance with its purpose;
  • Knowing the third parties to whom it is transferred domestically or abroad;
  • request correction of incomplete or incorrectly processed data;
  • Requesting the deletion or destruction of personal data in case the conditions stipulated in the KVKK are met;
  • Request correction, deletion or destruction to be notified to third parties to whom the data has been transferred;
  • Object to a result against you arising from the analysis of data exclusively through automated systems; and
  • Request compensation for the damage if you suffer damage due to illegal processing of personal data

You have the rights.

6. Application Procedure

Your requests within the scope of KVKK;

  • In writing and signed to the company address above;
  • If available, PhiShark's declared KEP address;
  • using secure electronic signature or mobile signature; or
  • To [email protected] via your e-mail address that you have previously notified to PhiShark and is registered in our systems.

You can forward it to the Data Controller in accordance with the Communiqué on Application Procedures and Principles.

In your application, information sufficient to identify your identity and your request must be clearly stated, as well as the subject of your request.

Applications are concluded as soon as possible and within 30 days at the latest, free of charge, as a rule, depending on the nature of the request.

In cases where the application is rejected, the response is found insufficient, or the response is not given in time, you can file a complaint with the Personal Data Protection Board within the conditions and periods stipulated in Article 14 of the KVKK.

7. Communication

PHISHARK TEKNOLOJİ ANONİM ŞİRKETİ Cevizli Mah. Zuhal Cad. Ritim Istanbul Sitesi A5 Blok No:46E İç Kapı No:179 Maltepe/İstanbul Email: [email protected]