12.1. The content of the Agreement is confidential. The Parties will not provide any information or document regarding the content of the Agreement to third parties except where legally required.
12.2. Any idea, invention, project, business, method, progress and patent, copyright, trademark, trade secret or any other innovation - whether or not subject to legal protection - that a Party learns about the other Party, together with all written or oral commercial, financial and technical information and conversation information learned during the course of work, and information belonging to the CUSTOMER's personnel obtained within the scope of the service, are deemed confidential information, and the Parties agree to keep such information confidential. This obligation shall remain in force even if this Agreement is terminated.
12.3. The Parties accept and undertake that they and their employees will know the confidential information set out in Article 12.2 only to the extent necessary for the performance of their work, and that such information and documents will under no circumstances be disclosed to third-party natural and/or legal persons and organisations without the Parties' consent for purposes other than the work, will not be distributed in any manner or by any means, will not be disclosed through press, publication organs and media outlets, and will not be used for advertising purposes.
12.4. The CUSTOMER is the data controller with respect to the personal data of its personnel processed within the scope of this service under Law No. 6698 on the Protection of Personal Data (KVKK). The SERVICE PROVIDER acts as the data processor.
12.5. The CUSTOMER acknowledges and accepts that the explicit consent and information obligations it must obtain from its employees must be fulfilled by itself.
12.6. The SERVICE PROVIDER cannot be held liable for data loss, data breach, unauthorised access, service interruption or other damages and losses that may arise due to the failure of personnel authorised by the CUSTOMER to comply with the obligations relating to the confidentiality of access information.
12.7. If it is noticed that passwords or access information have been obtained by third parties, used without authorisation, or that their security has been compromised, the CUSTOMER is obliged to notify the situation in writing immediately to the SERVICE PROVIDER. All transactions carried out during the period until such notification is made are deemed to be the responsibility of the CUSTOMER.
12.8. The CUSTOMER is exclusively responsible for any administrative, legal or criminal claims that may be raised by employees, public institutions, the Personal Data Protection Authority or third parties in relation to the data processed within the scope of the service.
12.9. In the event that any administrative fine, compensation claim, lawsuit, investigation or sanction is imposed on the SERVICE PROVIDER due to data processing carried out at the request of the CUSTOMER, the CUSTOMER agrees to compensate, in cash and in a lump sum upon first demand, all damages incurred by the SERVICE PROVIDER, its litigation costs, attorney's fees, consultancy expenses and other costs.
12.10. The CUSTOMER accepts, declares and undertakes that the personal data processed within the scope of the service has been obtained lawfully, that the relevant employees have been informed by means of the necessary privacy notices, and that the necessary data processing conditions have been met where required by legislation.
12.11. Upon termination of the Agreement, the SERVICE PROVIDER retains the information belonging to the CUSTOMER and the USER for a period of 3 (three) months. During this period, the CUSTOMER may, upon request, receive all of its data free of charge. At the end of the retention period, the data is deleted, destroyed or anonymised in accordance with applicable legislation.