Privacy Notice

Lucerna Business Solutions is the data controller for the personal data processed on this website and in connection with our services. We provide business technology services including CRM, ERP, custom software development, artificial intelligence solutions, data analysis, reporting, automation, integration, digital transformation and business process improvement.

When you contact us, request information, ask for a proposal, use our services, enter into a contract or browse our website, we may process personal data limited to what is necessary for the relevant activity. We do not request or process special categories of personal data unless the service specifically requires it.

We process personal data in accordance with applicable data protection law and for the following purposes:

We collect personal data fully or partially through automated or non-automated means via the following channels:

Personal data is processed based on the legal grounds set out in applicable data protection law, including where processing is expressly required by law, necessary for the performance or conclusion of a contract, necessary for compliance with a legal obligation, necessary for the establishment, exercise or protection of a legal right, necessary for our legitimate interests without harming your fundamental rights and freedoms, or based on your explicit consent. Where explicit consent is required, it is obtained separately from this notice and based on your free will.

If you contact us or request information about a product or service, we may contact you to respond to your request and manage the necessary communication processes. Your phone number may be used via WhatsApp for communication purposes, as needed to respond to your request, manage proposal processes, deliver services or maintain an existing customer relationship.

Advertising, campaigns, promotions, marketing, new product or service announcements and similar commercial messages sent via WhatsApp, SMS, email or other electronic communication channels are carried out in compliance with applicable permission and communication rules. Where permission is required for commercial electronic messages, it is obtained separately from this Privacy Notice.

You can change your commercial electronic communication preferences or decline such messages at any time using the methods required by applicable law. Where applicable, commercial electronic communication processes take into account the Commercial Electronic Message Management System (İYS) and relevant legislation.

Personal data may be transferred to the following recipients, in compliance with applicable data protection law and limited to the processing purposes: authorized public authorities, authorized judicial and administrative bodies, advisors retained for financial and legal compliance, accounting and finance service providers, legal and consultancy service providers, hosting, server, cloud and technical infrastructure providers, software and technology service providers, project partners and suppliers, payment and financial service providers, information technology and information security service providers, and other persons or organizations authorized by law.

Transfers are carried out only to the extent required by the relevant service or legal obligation. Where personal data is transferred outside Türkiye, the current rules on international data transfers under applicable law are applied.

Personal data is retained for the periods prescribed by applicable law, contractual relationships, legal obligations, statute of limitation periods and the duration required by the processing purpose. When the purpose and legal basis for processing cease to exist and there is no other legal reason to retain the data, personal data is deleted, destroyed or anonymized in accordance with applicable law.

Lucerna Business Solutions takes technical and administrative measures appropriate to the nature of the data processed and the specifics of its activities to prevent unlawful processing and access, and to ensure secure storage of personal data. These measures include access authorization and control, user authorization, information security practices, data backup, system and access security, controls to prevent unauthorized access, confidentiality obligations and data security processes.

As a data subject, you have the following rights under applicable data protection law:

You may submit requests to exercise your rights in accordance with the procedures and principles set out in applicable data protection law. Your application should include your first and last name, subject of the application, your request and contact information. Additional information and documents may be requested as required by law for identity verification and the nature of the application. Applications are evaluated and concluded within the time and procedure prescribed by law.

This Privacy Notice may be updated in line with changes in our activities, technologies used, services or applicable legislation. The current version is always published on the lucernabs.com website.

This Privacy Notice entered into force on 08.08.2026.