Customer Overseas Data Transfer Explicit Consent Statement
Last update: Sep 14, 2026
Last update: Sep 14, 2026
1. Purpose of This Declaration
Hipposoft Yazılım Ltd. Şti. (“Hipposoft”) primarily transfers your personal data abroad pursuant to Article 9 of Law No. 6698 on the Protection of Personal Data (“KVKK”), based on an adequacy decision or appropriate safeguards, such as standard contracts published by the Personal Data Protection Board.
This declaration has been prepared solely to obtain your explicit consent pursuant to Article 9/6(a) of the KVKK for occasional transfers (occurring once or a few times and not on a continuous basis) in cases where no adequacy decision exists and none of the appropriate safeguards can be provided.
2. Recipients to Whom Data May Be Transferred and Purposes of Transfer
1. Purpose of This Declaration
Hipposoft Yazılım Ltd. Şti. (“Hipposoft”) primarily transfers your personal data abroad pursuant to Article 9 of Law No. 6698 on the Protection of Personal Data (“KVKK”), based on an adequacy decision or appropriate safeguards, such as standard contracts published by the Personal Data Protection Board.
This declaration has been prepared solely to obtain your explicit consent pursuant to Article 9/6(a) of the KVKK for occasional transfers (occurring once or a few times and not on a continuous basis) in cases where no adequacy decision exists and none of the appropriate safeguards can be provided.
2. Recipients to Whom Data May Be Transferred and Purposes of Transfer
Service Providers
Data Transfer & Infrastructure Table
Service provider
Microsoft Azure
Purpose of transfer
Hosting of the Platform, database, backup and infrastructure services
Data categories
Identity, Contact, Customer Transaction, Finance, Transaction Security
Service provider
Microsoft 365
Purpose of transfer
Corporate email, correspondence and document management
Data categories
Identity, Contact, Customer Transaction, Legal Transaction
Service provider
Cloudflare
Purpose of transfer
Content delivery, information security and prevention of cyberattacks
Data categories
Transaction Security
Service provider
Brevo
Purpose of transfer
Transactional emails, and if consent given, newsletter and campaign emails
Data categories
Identity, Contact, Marketing
Service provider
OneSignal
Purpose of transfer
Mobile and web push notifications
Data categories
Transaction Security, Customer Transaction
Service provider
Craftgate
Purpose of transfer
Processing payment transactions
Data categories
Identity, Contact, Finance
Service provider
Google Analytics
Purpose of transfer
Website and app usage analytics
Data categories
Transaction Security, Marketing
Service provider
Google Ads
Purpose of transfer
Measuring advertising performance and retargeting
Data categories
Marketing
Service provider
Hotjar
Purpose of transfer
User experience analysis
Data categories
Transaction Security, Marketing
Service provider
Purpose of transfer
Data categories
Microsoft Azure
Hosting of the Platform, database, backup and infrastructure services
Identity, Contact, Customer Transaction, Finance, Transaction Security
Microsoft 365
Corporate email, correspondence and document management
Identity, Contact, Customer Transaction, Legal Transaction
Cloudflare
Content delivery, information security and prevention of cyberattacks
Transaction Security
Brevo
Transactional emails, and if consent given, newsletter and campaign emails
Identity, Contact, Marketing
OneSignal
Mobile and web push notifications
Transaction Security, Customer Transaction
Craftgate
Processing payment transactions
Identity, Contact, Finance
Google Analytics
Website and app usage analytics
Transaction Security, Marketing
Google Ads
Measuring advertising performance and retargeting
Marketing
Hotjar
User experience analysis
Transaction Security, Marketing
Service provider
Purpose of transfer
Data categories
Microsoft Azure
Hosting of the Platform, database, backup and infrastructure services
Identity, Contact, Customer Transaction, Finance, Transaction Security
Microsoft 365
Corporate email, correspondence and document management
Identity, Contact, Customer Transaction, Legal Transaction
Cloudflare
Content delivery, information security and prevention of cyberattacks
Transaction Security
Brevo
Transactional emails, and if consent given, newsletter and campaign emails
Identity, Contact, Marketing
OneSignal
Mobile and web push notifications
Transaction Security, Customer Transaction
Craftgate
Processing payment transactions
Identity, Contact, Finance
Google Analytics
Website and app usage analytics
Transaction Security, Marketing
Google Ads
Measuring advertising performance and retargeting
Marketing
Hotjar
User experience analysis
Transaction Security, Marketing
3. Information on Possible Risks
Pursuant to Article 9/6(a) of the KVKK, you must be informed of the possible risks of the transfer before giving explicit consent. In a transfer where no adequacy decision or appropriate safeguard is available:
• The country in which the recipient is located may not have personal data protection legislation equivalent to that of Türkiye or an independent supervisory authority.
• It may be more difficult to exercise your rights under the KVKK in the recipient country and to seek effective legal remedies in that country.
• Public authorities in the recipient country may request access to your personal data under their own laws.
To mitigate these risks, Hipposoft enters into agreements with service providers containing confidentiality and data security obligations and limits transfers to the data necessary for the purposes specified.
4. Nature and Withdrawal of Your Consent
• Giving explicit consent is voluntary and is not a prerequisite for benefiting from HRplan services. If you do not give consent, only the occasional transfers covered by this declaration will not be carried out.
• You may withdraw your consent at any time by notifying [email protected] or through the other application channels specified in the Customer Privacy Notice. Withdrawal takes effect prospectively.
• Detailed information on the processing of your personal data is available in the KVKK Customer Privacy Notice published at www.hrplan.net.
5. Explicit Consent Declaration
I have read and understood the Hipposoft Yazılım Ltd. Şti. KVKK Customer Privacy Notice and the information on possible risks contained in this declaration. I freely give my explicit consent to the transfer of my personal data to the service providers located abroad listed in the table, solely for the purposes specified above and only in occasional cases where no adequacy decision or appropriate safeguards are available.
☐ I have read, understood, and give my explicit consent.
For use with a wet signature:
3. Information on Possible Risks
Pursuant to Article 9/6(a) of the KVKK, you must be informed of the possible risks of the transfer before giving explicit consent. In a transfer where no adequacy decision or appropriate safeguard is available:
• The country in which the recipient is located may not have personal data protection legislation equivalent to that of Türkiye or an independent supervisory authority.
• It may be more difficult to exercise your rights under the KVKK in the recipient country and to seek effective legal remedies in that country.
• Public authorities in the recipient country may request access to your personal data under their own laws.
To mitigate these risks, Hipposoft enters into agreements with service providers containing confidentiality and data security obligations and limits transfers to the data necessary for the purposes specified.
4. Nature and Withdrawal of Your Consent
• Giving explicit consent is voluntary and is not a prerequisite for benefiting from HRplan services. If you do not give consent, only the occasional transfers covered by this declaration will not be carried out.
• You may withdraw your consent at any time by notifying [email protected] or through the other application channels specified in the Customer Privacy Notice. Withdrawal takes effect prospectively.
• Detailed information on the processing of your personal data is available in the KVKK Customer Privacy Notice published at www.hrplan.net.
5. Explicit Consent Declaration
I have read and understood the Hipposoft Yazılım Ltd. Şti. KVKK Customer Privacy Notice and the information on possible risks contained in this declaration. I freely give my explicit consent to the transfer of my personal data to the service providers located abroad listed in the table, solely for the purposes specified above and only in occasional cases where no adequacy decision or appropriate safeguards are available.
☐ I have read, understood, and give my explicit consent.
For use with a wet signature:
Name Surname:
Date:
Signature:
Name Surname:
Date:
Signature:
Name Surname:
Date:
Signature: