Personal Data Protection Notice (KVKK)

This English notice is provided for users who prefer English. It explains processing through denerim.com under Türkiye's Personal Data Protection Law No. 6698 (the “KVKK”). If an interpretation differs, the applicable Turkish legislation and the Turkish notice govern.

1. Data controller

Data controller: EMİRHAN BIÇAKÇI
Website: denerim.com
General email: [email protected]
KVKK applications: [email protected]

2. Categories of personal data

• identity, profile and user records, such as username and optional name information;
• contact data, primarily email address and information included in messages;
• account data, status, consent records, password hashes and verification/reset records;
• transaction security data, including IP address, sessions, sign-in history, logs and device/browser data;
• user interactions and content, including reviews, questions, answers, comments and ratings;
• support, complaint, legal-notice and application information;
• cookie preferences, page views and usage/navigation information;
• account information received when you elect to use a third-party sign-in provider.

3. Processing purposes

Personal data may be processed to:

• provide and maintain the website, accounts and requested features;
• authenticate users, secure transactions and prevent abuse;
• publish, manage and moderate user contributions;
• respond to enquiries, complaints, rights requests and legal notices;
• measure and improve performance and user experience;
• meet statutory obligations and establish, exercise or protect legal rights.

4. Collection methods and legal grounds

Data may be collected electronically through website forms, account and sign-in screens, profile and content areas, cookies, server/security logs, support email and integrated service providers. Depending on the processing, legal grounds under Article 5 of the KVKK may include an express legal requirement, performance or formation of a contract, compliance with a legal obligation, establishment or protection of a right, legitimate interests that do not harm fundamental rights and freedoms, or explicit consent.

5. Recipients

Where necessary and legally permitted, data may be transferred to:

• competent public institutions, judicial authorities and legal advisers;
• hosting, server, CDN, maintenance, security and technical-support providers;
• email, verification, notification, authentication and media-hosting providers;
• analytics, performance and error-monitoring providers, subject to consent where required;
• services you explicitly choose to access through a link or integration.

6. Domestic and international transfers

Some infrastructure and online service providers may process data in Türkiye or abroad. When a transfer falls within the KVKK, an applicable legal basis and transfer mechanism required by current law is used.

7. Retention

Personal data is retained for the period required by the relevant purpose and applicable legislation, and for reasonable limitation, security, audit and dispute-resolution periods. It is then deleted, destroyed or anonymised in accordance with applicable requirements.

8. Rights under Article 11 of the KVKK

Subject to the KVKK, you may ask whether your personal data is processed and:

• request information and access;
• learn the purpose of processing and whether data is used accordingly;
• learn the recipients in Türkiye or abroad;
• request correction and notification of correction to relevant recipients;
• request deletion or destruction when legal conditions are met and notification to recipients;
• object to a result arising exclusively from automated analysis that is adverse to you;
• claim compensation for damage caused by unlawful processing.

9. How to apply

Send a request that clearly identifies you, the right exercised and the relevant facts to [email protected]. Additional information may be requested solely to verify identity and prevent unauthorised disclosure. Applications are handled within the time and method required by applicable law.