Protection of Personal Data

The main purpose of the Protection, Processing and Deletion of Personal Data Policy is to inform the concerned about the processing of personal data carried out by Lotmatik in accordance with the law and the methods implemented for the protection and deletion of this data. In this context, it is aimed to provide transparency by informing our website members, customers and prospects, employees, job applicants, managers, company visitors, employees of the companies we work with, and third parties whose personal data are processed.

Personal Data Protection, Processing and Deletion Policy; Includes all personal data that are processed automatically, via website members, customers and prospects, our employees, prospective employees, managers, company visitors, employees of companies we collaborate with, and third parties, provided that they are automated or part of any data recording system.

Lotmatik takes the necessary measures and measures to ensure compliance with the legislation regarding the internal processing it will create by taking the necessary systems and measures for the protection of personal data and the processing, protection and deletion of personal data.

Explicit consent: Consent on a specific subject, informed and expressed with free will,

Anonymizing: Personal data, even by matching with other data, to be unrelated to any identifiable or identifiable natural person,

Contact person: The real person whose personal data is processed,

Personal data: Any information related to an identified or identifiable natural person,

Processing of personal data: Acquisition, recording, storage, retention, modification, reorganization, disclosure, transfer, acquisition, acquisition of personal data in a fully or partially automated manner or as part of any data recording system can be obtained. any action taken on the data such as making it, classifying it or preventing it from being used,

Board: The Personal Data Protection Board,

Institution: Personal Data Protection Authority,

Law: Law on Protection of Personal Data,

Data processor: The real or legal person who processes personal data on his behalf, based on the authority granted by the data controller,

Data recording system: The recording system where personal data is processed according to certain criteria,

Data controller: Real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system, expresses.


a. Compliance with law and integrity rules

Lotmatik acts in compliance with the law and honesty rules when processing personal data. In this framework, considering the principle of proportionality and necessity, it processes as much personal data as necessary.

b. Being accurate and up-to-date

Lotmatik pays attention to the correctness and timeliness of the personal data it processes and takes the necessary measures for this purpose.

c. Processing for specific, clear and legitimate purposes

Lotmatik processes personal data related to the service it provides and to the extent necessary for the performance of the service. If the purpose of the service provided is not clear for what purpose the personal data will be processed, it is also presented to the data owners in advance. Personal data are not processed for purposes other than those specified.

d. Being connected, limited and restrained for the purpose for which they are processed

Personal data are processed to achieve the specified purpose and are not processed in situations that are not relevant or needed to achieve the goal.

e. Preservation for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed

Lotmatik stores the personal data it has processed for a limited period of time specified in the Law or for the purposes for which they are processed.


While processing personal data, Lotmatik acts in accordance with the conditions specified in the Law and related legislation. In this context, if the conditions are available, personal data is processed, and personal data that does not meet the conditions are not processed, and if done, they are stopped. As a rule, personal data is processed by obtaining the express consent of the data subjects. However, it is possible to process personal data without seeking the explicit consent of the person concerned, in the event of the following conditions listed in the Law.

a) Clearly prescribed by law.

b) The person who is unable to disclose his consent due to actual impossibility or whose legal consent is not given validity is compulsory to protect himself or anyone else’s life or body integrity.

c) The processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract.

d) It is mandatory for the data controller to fulfill his legal obligation.