Privacy Notice (KVKK)
Effective date: 23 October 2026
Draft – awaiting legal review. This text becomes final after the lawyer has reviewed it.
This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform people who use guncelihale.com. The Turkish text prevails.
Data controller
[COMPANY NAME] ("guncelihale.com"), MERSIS no: [MERSIS NO], address: [ADDRESS], registered e-mail (KEP): [KEP ADDRESS], e-mail: [E-MAIL].
Personal data we process
- Identity and contact: your e-mail address; if you sign in with Google or LinkedIn, the name and profile photo address held in that account.
- Customer transactions: your plan, subscription periods, saved searches and alert settings.
- Security: session records, IP address, browser details, sign-in times.
- Marketing: your bulletin consent and the campaign or link that brought you to the site (UTM data).
- Legal records: your consent records (text version, date and IP).
guncelihale.com never sees or stores your card details; they are processed by the payment provider.
Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5/2) |
|---|---|
| Opening your account, signing you in, providing the content of your plan | (c) performance of a contract |
| Invoicing, accounting and tax records, keeping consent records | (ç) legal obligation |
| Account security, preventing abuse, error logs | (f) legitimate interest |
| Protecting rights in a dispute | (e) establishing, exercising or protecting a right |
| Weekly bulletin and commercial electronic messages | your separate consent under Law No. 6563 |
Transfers
Your data is shared only for the purposes above, and only as far as needed, with:
- Service providers (processors): hosting (IHS Telekom, Turkey), domain and network protection (Cloudflare), e-mail delivery (Resend, Brevo), error tracking (Sentry), payments (iyzico) and e-invoicing (Paraşüt).
- Sign-in providers: if you choose to sign in with Google or LinkedIn, sign-in runs through that provider.
- Public authorities: when legally authorised authorities request it.
Transfers to service providers abroad rely on the standard contracts announced by the Board or other appropriate safeguards under KVKK Art. 9. No personal data is sent to the AI service used for notice summaries and translations.
How we collect data
Electronically and automatically, through the sign-up and sign-in forms, Google or LinkedIn sign-in, your use of the site and strictly necessary cookies.
Retention
Account data is kept while your account is open. When you delete your account, your identity and contact data is deleted. Invoices and accounting records are kept for the periods required by law (e.g. 5 years under the Tax Procedure Law); consent records are kept anonymously as proof.
Your rights (KVKK Art. 11)
You can ask whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know who it is shared with; ask for incomplete or wrong data to be corrected, deleted or destroyed and for recipients to be told; object to an outcome against you that results solely from automated analysis; and claim compensation for damage.
Send requests to [E-MAIL] or to the KEP address [KEP ADDRESS]. We answer free of charge within 30 days at the latest. You can delete your account at any time from your account page.