KVKK Aydınlatma Metni

This is a courtesy translation of our KVKK Information Notice (Aydınlatma Metni) prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698. The Turkish version above is binding for Turkish data subjects.

1. Data Controller

Legal name: Tedars
Address: TBD
Tax / MERSIS No: TBD
Contact: kvkk@tedars.com, TBD

2. Categories of Personal Data Processed

Identity: first/last name, username.
Contact: email, optional phone.
Customer transactions: dashboard actions, invoicing details, payment history.
Transaction security: IP address, session id, user-agent, login timestamps, failed-login counters.
Content you supply: fact-sheet, product records, widget configuration.

We do not store: the content of end-user chat messages exchanged through the widget. Only anonymous session and token-usage counters are retained.

3. Purposes of Processing

Establishing and performing the service contract
Billing and fulfilment of tax obligations
Information security (login auditing, account lockout)
Service quality improvement and error monitoring
Compliance with legal obligations
Handling support requests and complaints

4. Legal Bases (KVKK Art. 5/2)

(c) Necessary for the conclusion or performance of a contract
(ç) Required for compliance with a legal obligation
(e) Necessary for the establishment, exercise or protection of a right
(f) Legitimate interests, provided they do not override your fundamental rights (e.g. security logs)

5. Transfers

We may transfer personal data to the following recipients, only as strictly required:

Service providers (domestic/cross-border): cloud hosting (Hetzner, Germany — EU), email delivery (Resend), AI inference (OpenRouter — routing requests to open-weights Llama models; cross-border transfer outside Türkiye under KVKK Art. 9 with your consent). Chat content is not retained by the AI provider for model training.
Competent public authorities: to comply with legal obligations.

6. Collection Method

Personal data is collected electronically, by automatic or semi-automatic means, through our website, dashboard, email correspondence and support channels.

7. Retention

Account data: for the life of the account, then up to 10 years for commercial/tax obligations (Turkish Commercial Code Art. 82).
Security logs (login records, IP): typically 12 months.
Backups: additional retention up to 90 days.

8. Your Rights (KVKK Art. 11)

You have the right to:

(a) learn whether your data is being processed;
(b) request information about the processing;
(c) learn the purpose and whether it is used in line with that purpose;
(ç) know third parties to whom data is transferred, domestically or abroad;
(d) request correction of incomplete or inaccurate data;
(e) request erasure or destruction;
(f) request that any correction, erasure or destruction be communicated to third parties to whom data was transferred;
(g) object to results derived solely from automated processing that adversely affect you;
(ğ) claim compensation for damage arising from unlawful processing.

9. Submitting a Request

To exercise your rights, write to kvkk@tedars.com with information verifying your identity. We will respond free of charge within 30 days (the Authority's fee schedule may apply for responses exceeding 10 pages).

10. Changes

This notice may be updated. The current version is always available on this page.

KVKK Information Notice (Turkey)