Legal · Personal data

KVKK Privacy Notice

Last updated: [EFFECTIVE DATE]

This notice has been prepared by [COMPANY LEGAL NAME] (“Laracalls”), in its capacity as data controller, pursuant to Article 10 of Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It explains how we process your personal data when you visit our website, request a demo, or contact us.

Laracalls has two separate roles. For website visitors and people who request a demo, we are the data controller. For the calls Lara makes on behalf of client businesses, that business is the data controller and we are the data processor; this is explained separately in Section 9.

Data controller

Legal name: [COMPANY LEGAL NAME]
Address: [ADDRESS]
MERSIS / trade registry no.: [MERSIS / TRADE REGISTRY NO.]
Email: [EMAIL]
KEP (registered email) address: [KEP ADDRESS]
VERBIS registration no.: [VERBIS NO.]
Data controller’s representative in Turkey: [IF ANY: NAME AND ADDRESS OF THE DATA CONTROLLER’S REPRESENTATIVE]

Laracalls has offices in London and California. Where the data controller is not resident in Turkey, the details of the data controller’s representative in Turkey are given above.

Personal data we process

We process only the data you send us through the channels below, or data generated while you use our site:

Demo request and contact form

Identity: your first and last name
Contact: your email address and phone number
Professional information: the name of the company you work for
Request content: the message and questions you write in the form

Demo booking (Calendly)

When you book through the Calendly calendar embedded on the site, we receive your name, your email address, the day and time you choose, and your answers to the questions on the booking form.

Correspondence

If you reach us by email or phone, the content of that communication and your contact details.

Site usage

Transaction security: server logs such as IP address, browser and device information, and the date and time of access
Cookie data: details in our Cookie Policy

Please do not share more information than the forms ask for, in particular special categories of personal data such as health, religious or biometric data.

Purposes of processing and legal grounds

We process your personal data for the specific purposes below, each on the basis of the KVKK provision listed next to it:

Purpose	Data processed	Legal ground (KVKK)
Receiving your demo request, getting back to you, and scheduling the demo	Identity, contact, professional information, request content	Art. 5(2)(c): processing is directly related to the establishment of a contract
Confirming the appointment, sending reminders, and rescheduling if needed	Identity, contact, appointment information	Art. 5(2)(c): processing is directly related to the establishment of a contract
Tailoring the demo to the sales process you described in your request, and presenting a proposal	Professional information, request content	Art. 5(2)(c): processing is directly related to the establishment of a contract
Answering your questions and correspondence	Identity, contact, correspondence content	Art. 5(2)(f): legitimate interest
Keeping the website running securely and preventing misuse and unauthorized access	Transaction security	Art. 5(2)(f): legitimate interest
Fulfilling obligations under the law and responding to requests from competent authorities	All relevant categories	Art. 5(2)(ç): legal obligation
Establishing, exercising or protecting a right in a possible dispute	All relevant categories	Art. 5(2)(e): establishment, exercise or protection of a right
Use of non-essential cookies	Cookie data	Art. 5(1): explicit consent (Cookie Policy)

If we are to send you product announcements or marketing messages, we will ask for your separate consent. This privacy notice does not replace such consent or explicit consent.

Method of collecting personal data

Through the demo request and contact form and the Calendly booking calendar, electronically, by automated means;
In email and phone correspondence, from the information you provide, by partially automated means;
Through server logs and cookies during your visit to our site, by automated means.

Transfer of personal data

We transfer your personal data to the recipient groups below only to the extent necessary for the purposes in Section 3:

Recipient group	Purpose of transfer
Service providers: cloud hosting and data storage, email and communication infrastructure, form infrastructure	Technical operation of the site, the forms and correspondence
Online scheduling provider (Calendly)	Creating, sending reminders for, and managing the demo booking
[IF ANY: GROUP COMPANIES]	Conducting demo and sales meetings
Legal and financial advisors	Fulfilling legal obligations and protecting rights
Competent public authorities and institutions	Responding to requests for information and documents arising under the law

Transfers abroad

Because Laracalls’ offices are outside Turkey and some of the service providers we use have their servers abroad, your personal data may be transferred abroad. These transfers are made in accordance with Article 9 of the KVKK (including the amendment made by Law No. 7499, in force since June 1, 2024): if the Personal Data Protection Board (the “Board”) has issued an adequacy decision for the destination country, we rely on it; if not, one of the appropriate safeguards listed in Article 9, such as the standard contract announced by the Board, is put in place; and if neither applies, the transfer is made only in the incidental cases listed in Article 9.

Safeguard applied: [BASIS FOR TRANSFER ABROAD, e.g. STANDARD CONTRACT]

Retention period

We keep your demo request and booking data for [RETENTION PERIOD] from the date your request is concluded. If a contractual relationship with Laracalls is established, the retention periods set by the applicable legislation apply.

Once the purpose of processing no longer exists and the legal retention period has expired, your personal data is erased, destroyed or anonymized in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data.

Your rights under Article 11 of the KVKK

By applying to Laracalls, you can exercise the following rights:

To learn whether your personal data is processed;
To request information about the processing if your personal data has been processed;
To learn the purpose of processing your personal data and whether it is used in line with that purpose;
To know the third parties in Turkey or abroad to whom your personal data is transferred;
To request the rectification of your personal data if it is incomplete or inaccurately processed;
To request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;
To request that the actions taken under subparagraphs (d) and (e) be notified to the third parties to whom your personal data has been transferred;
To object to a result against you arising from the analysis of the processed data exclusively through automated systems;
To claim compensation for the damage if you suffer damage due to the unlawful processing of your personal data.

How to submit a request

You can submit requests concerning your rights in one of the following ways, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

By a petition bearing your wet-ink signature, in person or by post: [ADDRESS]
By registered electronic mail (KEP): [KEP ADDRESS]
With a secure electronic signature or mobile signature, or from the email address you previously provided to us that is in our records: [EMAIL]

Your application must include your first and last name, your signature, your Turkish national ID number (or, if you are a foreign national, your nationality and passport number), your address for service of notices, your email address and phone number if any, and the subject of your request.

We will conclude your application free of charge as soon as possible depending on its nature, and within thirty days at the latest. If the action involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find the response insufficient, or no response is given in time, you can file a complaint with the Personal Data Protection Board (KVKK Art. 14).

Calls Lara makes on behalf of businesses

Businesses that use Lara call their leads and customers through Lara. For these calls, the business decides who is called, for what purpose, and how long the data is kept. Therefore, for these calls, the data controller is the business that uses Lara; Laracalls acts as a data processor under its contract with the business and the business’s instructions.

The data processed on behalf of the business in this context is:

The name and phone number of the person called (provided by the business);
The audio recording of the call and its transcript;
The summary and outcome of the call (e.g. an appointment booked); this summary is written into the business’s customer records system.

To make the calls, this data is transferred to providers of cloud infrastructure, telephony, speech recognition, speech synthesis and language model services. Some of these providers may be located abroad; these transfers are made under Article 9 of the KVKK.

To get information about the data processed about you in such a call, or to exercise your rights under Article 11, you need to apply to the business that called you; that business’s privacy notice applies. If your application reaches us, we will forward it to the business concerned and provide the information it needs to respond.

Changes to this notice

We may update this notice as our data processing activities or the legislation change. The current version is always published on this page; the last updated date appears at the top of the page. For details about cookies, see our Cookie Policy.