Last updated: October 2026
1. Data controller
Kisbu Group (“Kisbu”) processes the personal data obtained through this website as the data controller under the KVKK.
- Address: Levent Mah. Sülün Sk. No:5, Beşiktaş / İstanbul
- Email: info@kisbu.com
- Phone: +90 212 875 45 45
2. Personal data we process
- Identity and contact details: first and last name, email address and, if you provide it, phone number.
- Request details: the subject you select in the contact form, the content of your message and our correspondence.
- Careers: the CV and related information you share in career-related requests.
- Transaction security: server logs kept by the website infrastructure (IP address, access time, browser and device information).
- Cookies and similar technologies: see the Cookie Policy for details.
3. Purposes of processing
- Receiving, evaluating and answering your requests and questions.
- Connecting you with the relevant group company or unit.
- Evaluating your career requests.
- Ensuring the security of the website and our information systems.
- Fulfilling legal obligations and protecting our legal claims.
4. Legal bases
Under KVKK Art. 5/2, your data is processed on the grounds that it is necessary for pre-contractual steps taken at your request (c), for compliance with a legal obligation (ç), for the establishment, exercise or protection of a right (e), and for our legitimate interests provided that your fundamental rights and freedoms are not harmed (f). Processing that requires explicit consent, such as non-essential cookies, relies solely on your explicit consent, which you may withdraw at any time.
5. Method of collection
Your personal data is collected electronically, partly or fully by automated means, through the contact form on the website, email and telephone. The contact form works by passing the information you enter to info@kisbu.com through your email application; the form content is not stored in a database on this website.
6. Transfer of personal data
Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to the following recipient groups:
- the relevant companies and units within Kisbu Group, depending on the subject of your request,
- suppliers providing website hosting, email and information technology services,
- legally authorised public bodies and private persons.
If our service providers' servers are located abroad, the transfer is made in line with the conditions set out in KVKK Art. 9.
7. Retention period
Your data is kept for as long as the purpose of processing requires and for the retention periods set out in applicable legislation; afterwards it is deleted, destroyed or anonymised.
8. Your rights under KVKK Art. 11
You may exercise the following rights by applying to the data controller:
- To learn whether your personal data is processed,
- To request information if it has been processed,
- To learn the purpose of processing and whether it is used accordingly,
- To know the third parties to whom it is transferred in Türkiye or abroad,
- To request correction if it is incomplete or inaccurate,
- To request deletion or destruction under KVKK Art. 7,
- To request that corrections, deletions and destructions be notified to third parties to whom the data was transferred,
- To object to an outcome against you resulting from analysis exclusively by automated systems,
- To claim compensation if you suffer damage because of unlawful processing.
9. How to apply
You may submit your requests in writing to Levent Mah. Sülün Sk. No:5, Beşiktaş / İstanbul in accordance with the Communiqué on Procedures and Principles of Application to the Data Controller, or by email to info@kisbu.com in a way that allows your identity to be verified. Your application is concluded within thirty days at the latest, depending on the nature of the request.
If you find the response insufficient, if no response is given in time, or if your application is rejected, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the application date.
Persons residing in the European Economic Area may use the same application channel for rights arising from applicable legislation.