This English version is a translation provided for convenience. If it differs from the Turkish version, the Turkish version prevails.
1.Data controller
[Registered company name]
[Registered address]
MERSİS: [MERSİS no.]
2.Data processed, purposes and legal grounds
- Website visitors — transaction security (IP address, browser information, request log). Purpose: security of the website and prevention of misuse. Legal ground: legitimate interest (Art. 5(2)(f)). Your theme preference is kept only in your own browser and never reaches us.
- Trial applicants — identity (full name), contact (email, phone), customer transaction (company name, selected package), transaction security (IP address, time). Purpose: opening the account, verifying the email, communication about the Service. Legal ground: establishment of a contract (Art. 5(2)(c)) and legitimate interest (Art. 5(2)(f)).
- Customer representatives and users — identity, contact, transaction security (sign-in records, change history), customer transaction (support requests). Purpose: providing the Service, support, security, keeping the audit trail. Legal ground: performance of a contract (Art. 5(2)(c)), legal obligation (Art. 5(2)(ç)), legitimate interest (Art. 5(2)(f)).
- Billing contacts — billing name, tax or Turkish national ID number, address, phone. Purpose: invoicing and collecting the fee. Legal ground: performance of a contract (Art. 5(2)(c)) and legal obligation (Art. 5(2)(ç)).
We carry out no processing that requires your explicit consent. If we do in the future, we will ask for your consent separately before processing.
3.Method of collection
Personal data is collected electronically, partly by automated means (request and sign-in records), through the form on the website, the product's screens, email correspondence and notifications from the payment institution.
4.Transfers
Personal data is transferred to the hosting, authentication, email, error logging, AI and payment service providers we work with to provide the Service, only to the extent the relevant service requires. These providers and their countries are listed on the Subprocessors page. Transfers abroad are made with the appropriate safeguards (standard contracts) under Article 9 of the Law.
Where the law requires it, data is transferred to competent public authorities (for example, the Revenue Administration and judicial authorities).
5.Your rights
Under Article 11 of the Law, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of the processing and whether the data is used in line with that purpose; to know the third parties to whom it is transferred; to request its correction if it is processed incompletely or inaccurately; to request its deletion or destruction where the conditions in the Law are met, and the notification of these operations to the third parties to whom it was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
6.How to apply
You can send your application, clearly stating your identity and your request, in writing to [Registered address], by registered electronic mail (KEP) to [Registered email (KEP) address], or to [KVKK request email] with a secure electronic signature, a mobile signature or the email address you previously gave us and that is registered in our system.
Your application is concluded free of charge within 30 days at the latest. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
7.Data our Customers enter into the product
If you are an employee, customer or supplier of a company that is our Customer, that company is the data controller for the data about you that it enters into the product; we only process data on its behalf. You need to apply to that company. We forward any such application that reaches us to the company concerned without delay.