Introduction

At Karacay Business Teknoloji Hizmeti (“we,” “our,” “us”), we are committed to leveraging Artificial Intelligence (AI) responsibly, ethically, and transparently. This AI Policy outlines how we develop, deploy, and manage AI systems and tools in our services. It is designed to ensure that our use of AI complies with the General Data Protection Regulation (GDPR), the Turkish Law on the Protection of Personal Data (KVKK), and other relevant laws and ethical standards.

Scope

This policy applies to all AI systems and related processes that are developed, integrated, or operated by Karacay Business Teknoloji Hizmeti, including those that process personal data, make automated decisions, or support decision-making processes in our products and services.

Definitions

• Artificial Intelligence (AI): Technologies and algorithms that enable machines to perform tasks that typically require human intelligence, such as learning, reasoning, and problem solving.
• Automated Decision-Making: Any decision made, fully or partially, by an algorithmic system without human intervention.
• Personal Data: Any information relating to an identified or identifiable natural person, as defined under GDPR and Turkish KVKK.

Principles for AI Use

We adhere to the following principles when deploying and managing AI systems:

• Transparency: We strive to ensure that the use of AI in our services is clear and understandable. When AI systems contribute to decisions that may affect individuals, we will provide information about the logic involved and, where applicable, the significance and envisaged consequences of such processing.
• Accountability: We hold ourselves accountable for the outcomes of AI systems. This includes implementing robust governance and oversight mechanisms to monitor and review AI-driven processes.
• Fairness and Non-Discrimination: Our AI systems are designed to promote fairness and avoid biases. We continuously monitor our algorithms to prevent discriminatory outcomes.
• Data Minimization: In line with GDPR and KVKK, we collect and process only the personal data necessary for the intended AI functionalities, ensuring that data retention is limited to what is strictly required.
• Security: We implement state-of-the-art security measures to protect data processed by AI systems from unauthorized access, alteration, or loss.
• Human Oversight: Where AI systems make or support decisions that significantly affect individuals, we ensure that appropriate human oversight is maintained, including the option for human review or intervention.

AI System Development and Deployment

• Risk Assessment: Prior to deployment, each AI system undergoes a risk assessment to evaluate potential impacts on privacy, data security, and individual rights. These assessments are periodically reviewed and updated.
• Data Governance: Any personal data used to train or operate AI systems is handled in strict accordance with data protection laws. This includes obtaining explicit consent where required, anonymizing data when possible, and ensuring data accuracy.
• Documentation: We document the design, data sources, decision logic, and performance metrics of our AI systems. This documentation supports transparency and facilitates audits, reviews, or investigations as necessary.

Legal Basis and Data Protection

• Consent and Legitimate Interests: Where AI processing involves personal data, we ensure that the legal basis for processing is clearly established—whether by obtaining explicit consent from data subjects, fulfilling contractual obligations, or relying on our legitimate interests, provided these do not override individual rights.
• User Rights: Individuals have the right to access, correct, or request deletion of their personal data processed by AI systems, as well as the right to object to or request human intervention in automated decision-making. Detailed information on these rights is provided in our Privacy Policy and Data Protection Notice.

Transparency and Communication

• User Notification: Where AI plays a significant role in decisions affecting users, we provide clear, accessible explanations regarding the AI system’s purpose, functioning, and the data used.
• Feedback Mechanism: We encourage users to provide feedback or raise concerns about our AI systems. This feedback is integral to our continuous improvement process and helps identify potential issues related to bias, accuracy, or fairness.

Monitoring, Auditing, and Review

• Regular Audits: Our AI systems are subject to regular internal audits to ensure compliance with this policy and applicable legal requirements. These audits help identify, mitigate, and remediate any risks.
• Ongoing Improvement: We continuously evaluate and improve our AI systems, incorporating technological advances and evolving best practices to maintain a high standard of ethical AI use.
• Incident Response: In the event of a data breach or any incident involving AI system malfunction, we have established response protocols that include immediate investigation, notification to affected individuals (where required), and measures to prevent recurrence.

Third-Party AI Providers

• Due Diligence: When using third-party AI tools or services, we perform due diligence to ensure these providers comply with GDPR, KVKK, and our internal standards for ethical AI use.
• Contractual Safeguards: Agreements with third-party AI providers include clear data protection and confidentiality clauses to safeguard personal data and ensure compliance with our policies.

Updates to This Policy

This AI Policy may be updated periodically to reflect changes in technology, legal requirements, or our operational practices. The “Last Updated” date at the top of this document will indicate the most recent revision. We encourage users to review this policy regularly to remain informed about our AI practices.

Contact Us

If you have any questions, concerns, or requests regarding this AI Policy or our use of AI systems, please contact us via the appropriate channels as published on this website.