This Commitment to the Protection of Personal Data was prepared to state that all personal data processing actions under the Data Processor capacity by our Company are made per Law No. 6698 on Protection of Personal Data and other applicable legislations and communique.

1. PURPOSE OF PERSONAL DATA PROCESSING

Next4biz provides products and executes services to their customers in the digital environment and online by providing them with licenses of software it prepared in process management, customer relationship management, and customer services business areas. Under this context, Next4biz processes personal data that are necessary for redressing and managing complaints of the individual users and consumers that provide questions, requests, or issues to its corporate customers along with the operation of the software. The Processed Personal Data are protected according to Law No. 6690 and secondary legislation and are processed only for the purpose of execution of obligations arising from the contract. The personal data are disposed of by the data controller per legal terms, per the request of the relevant person, and by ensuring the data integrity of the data controller provided that there is a written request when their accessing purpose is over, and after there are no reasons to store personal data arising from the Laws.

2. ENSURING INFORMATION SECURITY

Next4biz takes various administrative and technical measures to conform to relevant regulations on the protection of personal data under Law No. 6698 Law on Protection of Personal Data and relevant legislation and to prevent unauthorized access to personal data.
In order to protect the confidentiality and safety of personal data, firewalls, and effective security policies and standards along with technological, physical, and administrative measurements are used. Next4biz conducts processes regarding information security management systems and conducts control, prevention, and monitoring activities.
Next4biz has direct relationships with its corporate customers that use its products and services. However, there is no direct connection between Next4biz and natural persons who are the end users of our corporate customers.In the requests of these natural persons towards reaching, changing, editing, deleting, etc. request towards the information that is in our products; our corporate customer which is the data controller of those relevant personsmeets requests of themselves from our product interface.
In all of the contracts of our employees, the obligations of information security and confidentiality are regulated specifically. Our employees have the awareness and responsibility to uphold confidentiality and legal obligations in terms of personal character, administrative competency, and customer satisfaction.

3.STORAGE AND TRANSFER OF PERSONAL DATA

Personal data of Next4biz’s corporate customers, or natural end users (relevant person) to whom the corporate customers of Next4biz sell products or services within the scope of customer services, customer relationships, and process management software which are the subject of the Next4biz’s commercial activities are stored and processed in a digital environment. Data stored in digital format are stored in high-security data centers outside the company headquarters.
Next4biz, in line with the above-mentioned purposes and limited to its scope, may transfer the personal data it processes to third parties if it is necessary to process it within the scope of customer interest, operations required by the service level, on-site R&D activities, data troubleshooting activities and support activities received within this scope.

4. PROCESSING OF SENSITIVE PERSONAL DATA

Next4biz does not process sensitive personal data defined under Law No. 6698 (race, ethnic origin, political opinion, philosophical beliefs, religion, sect or other beliefs, appearance, membership to associations, foundations, or syndicate, health, sexual life, criminal sentence, information about safety precautions, biometrical and genetic data) without the express consent of the relevant person.
Next4biz software, developed by Next4biz, is a product that provides Customer Relations, Customer Service and Business Process Management functions. Necessary administrative and technical measures are taken and constantly updated to ensure personal data security. However, Next4Biz is not a product developed for the purpose of processing sensitive personal data.

Information about the non-processing of personal data over Next4biz software is detailed under Article 8 Procedure for Considerations on the Management of Personal Data when Adapting and Using the Next4biz Product.

5. DISPOSAL OF PERSONAL DATA

Our company stores the personal data that it gathers or stores for the duration of its obligations arising from the Law, or as necessitated by the legal obligations due to the execution of obligations arising from the contract or protection of its rights. In the cases that this purpose or obligation is executed, or ceases to be or upon the request of the data controller or directly of the relevant person, provided that data integrity of our corporate customeris guaranteed, relevant data is disposed immediately, or via data scan by our Company made in 6 (six) months time frame at the latest.

6. RESPONSIBILITIES Of Next4biz

Within the scope of the services it provides to its customers, Next4biz is obliged to ensure its commitments regarding the protection of personal data and data privacy. Pursuant to the Law on the Protection of Personal Data, Next4biz is obliged to demonstrate the necessary compliance activities.

• • • Company employees are informed that the data they obtained in line with the operation purpose cannot be disclosed to 3rd parties and cannot be used for any other purpose per Law No. 6698 and this obligation continues after they leave their duties and necessary commitments are taken on this matter.
    • Necessary administrative and technical measures are taken to prevent unlawful processing and unlawful access to personal data and to protect the data.
    • Our Company takes the necessary measures within the technological possibilities to process personal data, store it in secure environments, and prevent its loss or alteration.
    • In accordance with Article 12 of the Law no 6698, our Company conducts its own internal audits and also has independent cyber security companies audit its security measures by having tests such as penetration tests.
    • Despite all necessary measurements taken by our company, if the personal data processed by our company are illegally obtained by others, this event is reported to the data controller by our company.
    • In the case that relevant persons want to use their rights under Article 11of the Law No. 6698 , they are required to send their requests to Next4biz Bilgi Teknolojileri A.Ş. Sahrayı Cedit Mahallesi Halk Sokak Pakpen Plaza No:40/4 Kadıköy 34734 İstanbul/Türkiye address in a written and signed manner or to our [email protected] registered electronic mail signed by secure electronic signature. The request is processed after identification confirmation.