What rights do you have under KVKK?
Article 11 of Personal Data Protection Law No. 6698 (KVKK) gives everyone whose personal data is processed rights that they can exercise by applying to the data controller. The table below summarizes these rights; the binding text is the Law itself.
| Right | What it means |
|---|---|
| To learn | To learn whether your personal data is processed |
| To request information | To request information about the processing if your data has been processed |
| To learn the purpose | To learn the purpose of processing and whether your data is used in line with that purpose |
| To know the recipients | To know the third parties in Türkiye or abroad to whom your data is transferred |
| Rectification | To request the correction of incomplete or inaccurate data |
| Erasure or destruction | To request the erasure or destruction of your data under the conditions set out in the Law |
| Notification to third parties | To request that rectification, erasure or destruction be notified to the third parties to whom the data was transferred |
| Objection | To object to an outcome against you that results from analysis of your data exclusively by automated systems |
| Compensation | To claim compensation if you suffer damage because your data was processed unlawfully |
The personal data Sora Yazılım Teknolojileri processes, and the purposes and legal grounds for processing it, are explained in the KVKK Privacy Notice.
Through which channels can you submit your request?
You can submit your request through any of the four channels below; the easiest is the form on this page.
| Channel | How to use it |
|---|---|
| Request form | Select the request type in the form on this page and write your explanation |
| Send to kvkk@sora-ik.com; sending from the email address you previously gave us makes identity verification easier | |
| Post | A signed letter to: Sora Yazılım Teknolojileri, Atatürk Mah. Ertuğrul Gazi Sk. Metropol İstanbul C1 Blok No: 2B İç Kapı No: 376, Ataşehir/İstanbul |
| KEP | (to be confirmed) |
How do you fill in the request form?
The form is completed in five steps; only the full name, email, request type and explanation fields are required.
- Enter your full name and email address; phone number and postal address for notifications are optional.
- Select the request type (e.g. request for information, rectification, erasure or objection).
- Describe your request clearly in the explanation field, stating the service or correspondence it relates to.
- If you wish, fill in the identity field: Turkish ID number (T.C. kimlik no) or, for foreign nationals, nationality and passport number.
- Submit the form; an automatic message confirming receipt of your request is sent to your email address.
Why is identity information optional?
The identity field is not mandatory because in most cases we can verify your identity using the email address you have given us. The Communiqué on the Procedures and Principles for Applications to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ) lists the Turkish ID number (for foreign nationals, nationality together with passport or identity number) among the elements a request should contain, which is why the field is offered in the form. If we can verify your identity with your email address, this information is not needed, and we do not make the field mandatory so as not to collect more personal data than necessary. If verification is not possible, we may ask you for additional information. The current text of the Communiqué is available at mevzuat.gov.tr.
When and how is your request answered?
Requests are answered within the period prescribed by law. Your request is either accepted or rejected with reasons, and the outcome is communicated to you in writing or electronically; this procedure is set out in Article 13 of Law No. 6698. If you find the response insufficient, the options available to you are set out in Article 14 of the Law.
Whom should you contact about your data in your employer's Sora İK account?
If you work for a company that uses Sora İK, your employer is the data controller for your employee data; Sora İK is the data processor that processes this data on your employer's behalf. You therefore need to send requests about your employee records, leave, attendance ledger or payroll records to your employer. How the roles are allocated is explained on the security page.