Last updated: [DD.MM.YYYY]. This document is a general template and does not constitute legal advice.
This notice describes how [COMPANY NAME], as data controller, processes your personal data in compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Data Controller
- Company: [COMPANY LEGAL NAME]
- Address: [registered address]
- Email: [kvkk@example.com]
2. Categories of Personal Data
- Identity: first and last name.
- Contact: email address, phone number.
- Customer transactions: subscription, plan, license and transaction records.
- Security: IP address, log records, session data, hashed password.
- Financial: billing and payment information where applicable.
3. Purposes of Processing
- Providing the Service, account management and license activation.
- Managing subscriptions, payments and billing.
- Communications and support.
- Information security, fraud and abuse prevention.
- Compliance with legal obligations.
- Measuring and improving service quality (including consent-based analytics).
4. Legal Bases
We process your data under KVKK Art. 5–6 and GDPR Art. 6, including: performance of a contract, compliance with a legal obligation, establishment or exercise of a legal right, our legitimate interests, and — where required (e.g. non-essential cookies, marketing) — your explicit consent.
5. Collection Method
Personal data is collected through forms, account registration, subscription and license operations, cookies and server logs, by automated or partially automated means.
6. Transfers
Your data may be shared, in line with KVKK Art. 8–9 and GDPR, with processors that help us deliver the Service (hosting, email, payment, analytics) and with competent authorities where legally required. Cross-border transfers are subject to appropriate safeguards.
7. Retention
Personal data is retained for as long as necessary for the stated purposes and statutory periods, then deleted, destroyed or anonymized.
8. Your Rights
Under KVKK Art. 11 and GDPR, you may: learn whether your data is processed and request information; learn the purpose of processing; know the third parties to whom data is transferred; request correction, deletion or destruction; object to outcomes resulting solely from automated processing; and claim compensation for unlawful processing.
9. How to Apply
You may submit requests in writing to [registered address], to [kvkk@example.com], or via our contact page. Requests are answered within the period required by law (no later than 30 days under KVKK).
10. Related Documents
See our Cookie Policy and Privacy Policy for further details.