Legal
KVKK Privacy Notice
Effective date: 25 September 2026
Effective date: 25 September 2026
Last updated: 25 September 2026
This notice is issued under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains who processes your personal data, for what purposes and on what legal grounds, where we obtained it, to whom we transfer it, and what your rights are. The Turkish version of this notice prevails.
Sodalis Bilişim Teknolojileri Sanayi ve Ticaret A.Ş. (owner of the Outfound brand)
MERSİS No: 0772173732600001
Address: İzmir Bilişim Vadisi, Gülbahçe Mah. İçmeler Cad. 14/1, İç Kapı No: B05, 35433 Urla / İzmir, Türkiye
Email: [email protected]
Registered email (KEP): [email protected]
Phone: +90 533 388 24 51
Details on cookies for website visitors are in our Cookie Policy, and details for Outfound account holders are in our Privacy Policy. The rights and application channels in this notice apply to everyone.
Emails sent by our customers: When a company uses Outfound to send emails on its own behalf, that company is the data controller for the personal data in those emails and Outfound acts only as a data processor (Data Processing Agreement). If you received such an email, you can direct your request to the sending company. If you write to us, we will forward your request and help stop further sending.
Outfound emails businesses and people working at businesses to introduce its product.
Data processed: your name, job title, company, business email address, your company’s website, industry and publicly available company information; the emails we sent you, your replies and any opt-out request.
Where we obtained it: your company’s website and other public sources, publicly available exhibitor and attendee lists of trade fairs and events, and business contact databases. The data is collected partly by automated means through software. Every email we send states the specific source through which we reached your address.
Purposes: introducing our products and services through business-to-business communication, reviewing and answering your reply, applying your opt-out, verifying the email address, ensuring delivery and preventing abuse.
Legal grounds: our legitimate interest in business-to-business communication and in starting a commercial relationship (KVKK Art. 5/2-f); the contact details having been made public by you or your company (Art. 5/2-d); our legal obligation to keep opt-out and Message Management System (İYS) records (Art. 5/2-ç; Law No. 6563 and the Regulation on Commercial Communication and Commercial Electronic Messages).
Commercial message rules: we send outreach emails only to merchants and tradespeople at business email addresses, never to personal mailboxes. Recipients in Türkiye are registered in İYS before sending and checked for opt-outs. We do not process special categories of personal data.
To stop receiving emails: reply “unsubscribe” (or “çıkar”), use the unsubscribe link in the email, or opt out through İYS. We apply your request within 3 business days at the latest and record it in İYS.
Data processed: your name, business email, optionally your phone number, your company and website, your answers in the form (role, company size, target market, current way of finding customers), your messages and support chats, and the link you came from (campaign tags).
Collection method: forms on our website, the live support tool, email and phone; electronically.
Purposes: answering your request; setting your early-access position and sending your invitation; preparing a sample buyer preview for your company by reading your company website; calling you and arranging a meeting; moving the prepared preview into your account when it opens; measuring which channel brought your sign-up and improving our service.
Legal grounds: steps taken at your request before entering into a contract (KVKK Art. 5/2-c) and our legitimate interest in promoting and improving our service (Art. 5/2-f).
Ad measurement (only with your consent): if you tick the separate, unticked box in the form, a one-way hashed version of your email address and the ad click identifier are sent to Meta, Google and LinkedIn to measure which ads brought which sign-ups. The legal ground for this transfer is your explicit consent (KVKK Art. 5/1 and Art. 9/6-a). If you do not tick the box, no such transfer takes place and your sign-up is not affected. You can withdraw your consent at any time by writing to [email protected].
We send our newsletter only if you give separate consent. Your consent is recorded in İYS. Every newsletter contains an unsubscribe link, and unsubscribe requests are applied within 3 business days at the latest.
Data processed: your name, email address, consent date, and newsletter open and click information.
Legal ground: your explicit consent (KVKK Art. 5/1) and consent obtained under Law No. 6563.
We do not sell personal data. We share it with the following recipient groups only as needed for the purposes above:
You can request the current list of service providers at [email protected].
Some of our service providers process data outside Türkiye, mainly in the United States and European Union countries. These transfers are made in accordance with Article 9 of KVKK, based on the standard contracts announced by the Personal Data Protection Board. The transfer for ad measurement relies solely on your explicit consent (section 4).
We keep personal data for as long as the processing purpose continues. When the purpose ends, the data is deleted, destroyed or anonymised. If you opted out, only your email address is kept on our suppression list so that we do not email you again. Consent and opt-out records for commercial electronic messages are kept for three years as required by law.
Under Article 11 of KVKK you have the right to apply to the data controller to:
You can submit your application, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, by one of the following:
Your application must include your name and surname, Turkish ID number (for foreigners, nationality and passport number), address for notification, email and phone if available, and a clear statement of your request.
We respond free of charge within 30 days at the latest. If the action requires an additional cost, only the fee in the tariff set by the Personal Data Protection Board may be charged. If your application is rejected, you find our answer insufficient, or we do not respond in time, you may file a complaint with the Personal Data Protection Board.
If you only want to stop receiving emails, none of the above is needed: simply reply “unsubscribe” to our email.
We update this notice as our processing activities change. The current version is always published on this page, and the date at the top changes.