Last updated: 4 September 2026
This Privacy Policy and KVKK Information Notice explains how Workon Ofis ve İş Yönetim Hizmetleri Anonim Şirketi (“Workon”, “we”, “us”) may collect, use, share, retain and protect personal data in connection with our website, business enquiries and services. It is intended to provide general transparency under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Additional notices or consent texts may apply to a specific service, form or processing activity where required.
1. Data Controller
The data controller is Workon Ofis ve İş Yönetim Hizmetleri Anonim Şirketi.
Registered address: Küçükbakkalköy Mah. Selvili Sok. No:4 Interior Door No:20, Ataşehir, Istanbul, Turkey.
Current business contact details and our Istanbul locations are available on the Contact Workon page.
2. When We May Collect Personal Data
Depending on how you interact with Workon, personal data may be collected when you:
- visit or use the Workon website;
- submit an enquiry or contact form;
- communicate with Workon by email, telephone, WhatsApp or another agreed channel;
- request information, a quotation or a service;
- enter into or perform a service relationship with Workon;
- visit a Workon location or attend a meeting;
- act as a customer, prospective customer, supplier, business contact, representative, shareholder, director, employee or other person connected with a business case.
3. Categories of Personal Data
The categories processed depend on the interaction and may include:
- Identity and contact data: name, surname, email address, telephone number, address and similar contact details;
- Business and professional data: company, role, business activity, shareholder or representative information and information relevant to a requested business service;
- Enquiry and communication data: messages, requests, correspondence, meeting notes and records of customer interactions;
- Service and transaction data: requested or purchased services, quotations, contractual information, billing or payment-related information where applicable;
- Document data: information contained in documents you provide where required for a requested process or service;
- Technical and website data: IP address, browser or device information, access logs, page interactions and cookie or analytics identifiers where applicable and permitted;
- Marketing preference data: communication preferences and consent records where marketing consent or another permission is required.
Please do not send sensitive or unnecessary personal data unless it is genuinely required for the relevant process and an appropriate collection route has been identified.
4. Purposes of Processing
Depending on the relevant interaction, Workon may process personal data for purposes including:
- responding to enquiries and providing requested information;
- assessing a requested service and preparing a quotation or scope;
- establishing, performing and managing a service or business relationship;
- coordinating administrative and operational steps within an agreed service scope;
- communicating with customers, prospective customers, suppliers and business contacts;
- maintaining business, transaction and communication records;
- meeting legal, regulatory, record-keeping and information obligations;
- establishing, exercising or protecting legal rights and claims;
- protecting website, system, office and information security;
- measuring and improving website performance and user experience where legally permitted;
- sending marketing communications only where the applicable legal basis and communication permissions allow this.
5. Legal Bases
Personal data is processed only where a legal basis under the KVKK applies. Depending on the activity, this may include processing that:
- is expressly provided for by law;
- is necessary for the establishment or performance of a contract directly related to the data subject;
- is necessary for Workon to comply with a legal obligation;
- is necessary for the establishment, exercise or protection of a right;
- is necessary for Workon’s legitimate interests, provided that the fundamental rights and freedoms of the data subject are not harmed;
- is based on explicit consent where consent is the applicable legal basis.
The applicable legal basis can differ according to the data, service, communication channel and purpose.
6. Sharing of Personal Data
Where necessary for a legitimate and legally permitted purpose, personal data may be shared with relevant recipients such as:
- technology, hosting, communications and other service providers supporting Workon’s operations;
- banks or financial institutions where a customer has requested support for a banking process;
- public authorities, registries or other competent institutions where required by law or by a requested process;
- independent licensed professionals where regulated professional work is required;
- suppliers and operational providers involved in an agreed service;
- courts, authorities or advisers where necessary to establish, exercise or defend legal rights.
Only data relevant to the applicable purpose should be shared, subject to the requirements of the KVKK and other applicable legislation.
7. Transfers of Personal Data Abroad
Some technology or service-provider arrangements may involve the processing or transfer of personal data outside Turkey. Where a transfer abroad takes place, Workon applies the requirements of Article 9 of the KVKK and the relevant secondary legislation.
Depending on the circumstances, a lawful transfer may rely on an adequacy decision, an appropriate safeguard permitted under the KVKK—such as an applicable standard contract or other recognized safeguard—or a statutory exception available for the specific transfer. The mechanism used must be appropriate to the relevant transfer and current legal requirements.
For current official information on international transfers, see the Turkish Personal Data Protection Authority.
8. Retention and Deletion
Workon retains personal data only for as long as required for the relevant processing purpose, applicable legal retention periods, the management of a contractual or business relationship, or the establishment, exercise or protection of legal rights.
When the reasons requiring processing no longer apply, personal data is deleted, destroyed or anonymized in accordance with applicable legislation and Workon’s relevant retention and disposal requirements.
9. Data Security
Workon takes reasonable technical and organisational measures intended to protect personal data against unlawful processing, unauthorized access, loss, alteration or disclosure, taking into account the nature of the data and the relevant processing activity.
No internet transmission or storage system can be represented as completely risk-free. For that reason, customers should use appropriate channels when sending documents or information that require additional protection.
10. Website Technologies and Cookies
The Workon website may use essential technologies required for site operation and, depending on website configuration and applicable preferences or consent requirements, analytics or similar technologies used to understand performance and improve the website.
Where a cookie or similar technology requires consent, the relevant preference or consent mechanism should be used before that technology is activated. Browser controls may also allow users to manage certain cookies, although disabling essential technologies can affect website functionality.
11. Your Rights Under Article 11 of the KVKK
Subject to the conditions and procedures in applicable law, data subjects may have the right to:
- learn whether their personal data is processed;
- request information if personal data has been processed;
- learn the purpose of processing and whether the data is used in accordance with that purpose;
- know the third parties to whom personal data is transferred in Turkey or abroad;
- request correction where personal data is incomplete or inaccurate;
- request deletion or destruction where the legal conditions are met;
- request notification of relevant correction, deletion or destruction operations to third parties to whom the data has been transferred, where applicable;
- object to a result arising against the person through analysis of processed data exclusively by automated systems;
- request compensation where damage is suffered because personal data has been processed unlawfully.
12. How to Submit a Data-Subject Request
Requests concerning personal data should be submitted to Workon using a method permitted under the KVKK and applicable secondary legislation, with sufficient information to identify the requester and the right being exercised. Current Workon contact information is available on the Contact Workon page.
Workon may request information reasonably necessary to verify identity before responding to a data-subject request. Requests are handled in accordance with the periods and procedures required by applicable law.
13. Changes to This Notice
This notice may be updated to reflect changes in Workon’s processing activities, website, services or applicable legislation. The current version is published on this page together with its latest update date.
This page is a general privacy transparency notice. A service-specific notice, explicit-consent text or contractual privacy provision may apply in addition where required for a particular processing activity.
