Declaration of Express Consent for Overseas Data Transfer to Suppliers, Service Providers, Consultants
Last update: Sep 14, 2026
Last update: Sep 14, 2026
1. Purpose of This Declaration
Hipposoft Yazılım Ltd. Şti. (“Hipposoft”) transfers your personal data abroad pursuant to Article 9 of the Personal Data Protection Law No. 6698 (“KVKK”), primarily on the basis of an adequacy decision or appropriate safeguards such as the standard contracts published by the Personal Data Protection Board.
This declaration has been prepared solely to obtain your explicit consent pursuant to Article 9/6-a of the KVKK for incidental transfers (transfers occurring once or a few times and not having a continuous nature) where no adequacy decision exists and none of the appropriate safeguards can be provided.
2. Potential Recipients and Purposes of Transfer
1. Purpose of This Declaration
Hipposoft Yazılım Ltd. Şti. (“Hipposoft”) transfers your personal data abroad pursuant to Article 9 of the Personal Data Protection Law No. 6698 (“KVKK”), primarily on the basis of an adequacy decision or appropriate safeguards such as the standard contracts published by the Personal Data Protection Board.
This declaration has been prepared solely to obtain your explicit consent pursuant to Article 9/6-a of the KVKK for incidental transfers (transfers occurring once or a few times and not having a continuous nature) where no adequacy decision exists and none of the appropriate safeguards can be provided.
2. Potential Recipients and Purposes of Transfer
Service provider
Purpose of transfer
Data categories
Microsoft 365
Corporate email, correspondence and document management
Identity, Contact, Professional Information, Finance, Legal Transaction
Microsoft Azure
Hosting and backup of Company systems and records
Identity, Contact, Finance, Transaction Security
Name Surname:
Company / Title:
Date:
Signature:
Service provider
Purpose of transfer
Data categories
Microsoft 365
Corporate email, correspondence and document management
Identity, Contact, Professional Information, Finance, Legal Transaction
Microsoft Azure
Hosting and backup of Company systems and records
Identity, Contact, Finance, Transaction Security
Name Surname:
Company / Title:
Date:
Signature:
Service provider
Purpose of transfer
Data categories
Microsoft 365
Corporate email, correspondence and document management
Identity, Contact, Professional Information, Finance, Legal Transaction
Microsoft Azure
Hosting and backup of Company systems and records
Identity, Contact, Finance, Transaction Security
3. Information on Potential Risks
Pursuant to Article 9/6-a of the KVKK, you must be informed of the potential risks of the transfer before providing explicit consent. In a transfer where there is no adequacy decision or appropriate safeguard:
• The country in which the recipient is located may not have personal data protection legislation equivalent to that of Türkiye or an independent supervisory authority.
• It may be more difficult to exercise your rights under the KVKK in the recipient country and to seek effective legal remedies in that country.
• Public authorities in the recipient country may request access to your personal data under their own laws.
To mitigate these risks, Hipposoft enters into agreements with service providers that include confidentiality and data security obligations and limits transfers to the data necessary for the stated purposes.
4. Nature and Withdrawal of Your Consent
• Providing explicit consent is voluntary and is not a prerequisite for establishing a business relationship with our Company. If you do not provide consent, only the incidental transfers covered by this declaration will not be carried out.
• You may withdraw your consent at any time by notifying [email protected] or through the other application channels specified in the Suppliers, Service Providers and Consultants KVKK Information Notice. Withdrawal shall take effect prospectively.
5. Explicit Consent Declaration
I have read and understood the Hipposoft Yazılım Ltd. Şti. Suppliers, Service Providers and Consultants KVKK Information Notice and the information regarding the potential risks set out in this declaration. I freely give my explicit consent to the transfer of my personal data to the service providers located abroad listed in the table, solely for the purposes specified above and only in incidental cases where there is no adequacy decision and no appropriate safeguards are available.
☐ I have read and understood the above and I give my explicit consent.
3. Information on Potential Risks
Pursuant to Article 9/6-a of the KVKK, you must be informed of the potential risks of the transfer before providing explicit consent. In a transfer where there is no adequacy decision or appropriate safeguard:
• The country in which the recipient is located may not have personal data protection legislation equivalent to that of Türkiye or an independent supervisory authority.
• It may be more difficult to exercise your rights under the KVKK in the recipient country and to seek effective legal remedies in that country.
• Public authorities in the recipient country may request access to your personal data under their own laws.
To mitigate these risks, Hipposoft enters into agreements with service providers that include confidentiality and data security obligations and limits transfers to the data necessary for the stated purposes.
4. Nature and Withdrawal of Your Consent
• Providing explicit consent is voluntary and is not a prerequisite for establishing a business relationship with our Company. If you do not provide consent, only the incidental transfers covered by this declaration will not be carried out.
• You may withdraw your consent at any time by notifying [email protected] or through the other application channels specified in the Suppliers, Service Providers and Consultants KVKK Information Notice. Withdrawal shall take effect prospectively.
5. Explicit Consent Declaration
I have read and understood the Hipposoft Yazılım Ltd. Şti. Suppliers, Service Providers and Consultants KVKK Information Notice and the information regarding the potential risks set out in this declaration. I freely give my explicit consent to the transfer of my personal data to the service providers located abroad listed in the table, solely for the purposes specified above and only in incidental cases where there is no adequacy decision and no appropriate safeguards are available.
☐ I have read and understood the above and I give my explicit consent.
Name Surname:
Company / Title:
Date:
Signature: