KVKK

KVKK Disclosure Text

We fulfill our disclosure obligation under the Personal Data Protection Law No. 6698 (KVKK).

Last updated: February 2026

1. Data Controller

In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by our company as the data controller: RockSoft Bilişim ve Yazılım A.Ş. Address: Bilkent Cyberpark Block E No:B08, Çankaya, Ankara Email: info@rocksoft.com.tr Phone: +90 (312) 266 15 11

2. Purpose of Processing Personal Data

Your personal data is processed for the following purposes: • Conducting communication activities • Evaluating job applications • Planning human resources processes • Fulfilling obligations required by legal regulations • Conducting company activities in compliance with legislation

3. Categories of Personal Data Processed

Personal data in the following categories is processed: • Identity information: First name, last name • Contact information: Email address, phone number • Professional experience: Resume, applied position (in career applications) • Transaction security information: IP address, browser information

4. Transfer of Personal Data

Your personal data may be transferred to: • Form service providers (Formspree, Web3Forms) — for processing contact forms • Authorized institutions and organizations as required by legal regulations In case of transfer of your personal data abroad, necessary measures are taken within the scope of Article 9 of KVKK.

5. Methods and Legal Reasons for Collecting Personal Data

Your personal data is collected through: • The contact form on our website • The career application form • Email through automatic and non-automatic means. Legal reasons: Explicit consent (KVKK Art.5/1), establishment or performance of a contract (KVKK Art.5/2-c), fulfillment of legal obligations (KVKK Art.5/2-ç), legitimate interest (KVKK Art.5/2-f).

6. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of KVKK, you have the following rights: • To learn whether your personal data is being processed • To request information if your personal data has been processed • To learn the purpose of processing and whether they are used in accordance with their purpose • To know the third parties to whom personal data is transferred domestically or abroad • To request correction if personal data is incomplete or incorrectly processed • To request deletion or destruction of personal data under Article 7 of KVKK • To request that correction and deletion operations be notified to third parties • To object to a result against you arising from analysis of processed data exclusively through automated systems • To claim compensation for damages arising from unlawful processing of personal data

7. Application Method

To exercise the rights mentioned above, you can apply to our company through the following methods: • Email: To info@rocksoft.com.tr with identity verification • Mail: By signed petition to Bilkent Cyberpark Block E No:B08, Çankaya, Ankara Your applications will be concluded free of charge within 30 days at the latest. If the process requires additional costs, fees determined by the Personal Data Protection Board may be charged.