[Company name not set yet] ·
TR EN

KVKK Data Protection Notice

Last updated: 2026-09-07 · [Company name not set yet]

KVKK Data Protection Notice

Under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), we provide this notice to inform you about the processing of your personal data by the data controller [Company Name].

1. Identity of the Data Controller

  • Legal name: [not set]
  • Tax ID / TCKN: [not set]
  • Tax Office: [not set]
  • MERSIS: —
  • Address: Hatay, Türkiye
  • Email: [email protected]
  • KEP: —

2. Personal Data Processed

  • Identity: name, Turkish ID No (invoicing only)
  • Contact: email, phone, address
  • Customer transactions: orders, invoices, payment references
  • Transaction security: IP, session logs, browser info
  • Marketing (consent-based): preferences, device ID

3. Purposes of Processing (KVKK Art. 5 & 6)

  • Contract formation and performance
  • Legal obligations (invoicing, tax, Law 5651 logs)
  • Legitimate interest (security, fraud prevention, quality)
  • Explicit consent (marketing, optional cookies)

4. Transfers (KVKK Art. 8-9)

  • Hosting infrastructure provider (EU data centre)
  • PCI-DSS compliant local/international payment institutions — for card/wallet processing only
  • Email and notification relay services — for delivery of notifications
  • Legal authorities — upon legally binding request

Cross-border transfers are performed either to countries deemed adequate under KVKK Art. 9, or under undertaking/SCC mechanisms. Upon your request, the current list of concrete recipients can be provided.

5. Method of Collection and Legal Basis

Data is collected via account creation, orders, contact forms, cookies and your panel usage — through automated/semi-automated means. Legal bases: KVKK Art. 5/2/a (prescribed by law), c (contract performance), ç (legal obligation), f (legitimate interest), 5/1 (explicit consent — marketing).

6. Your Rights under KVKK Art. 11

By applying to the data controller, you may:

  1. Learn whether your data is processed
  2. Request information if it is
  3. Learn the purpose and appropriateness of processing
  4. Know third parties involved in domestic/foreign transfers
  5. Request correction of incomplete/incorrect data
  6. Request deletion/destruction under Art. 7
  7. Request notification of the above to third parties
  8. Object to automated decisions producing adverse effects
  9. Claim compensation for damages due to unlawful processing

7. How to Apply

  • Email: [email protected] (from your registered address)
  • KEP: —
  • Written: Hatay, Türkiye by notary/registered mail

Applications must include your name, ID No, notice address, subject and legal basis. We respond within 30 days at no cost.