Data controller information notice under Turkish PDPL (Law No. 6698, Art. 10) and GDPR.
This notice is prepared under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR") by Ali Enis Tekin ("Data Controller"), operator of the Teknik Danışman platform, regarding the processing of personal data of panel users.
| Data Controller | Ali Enis Tekin |
|---|---|
| Namedress | Namenan Kahveci Mah. Hasbahçe Cad. Hasbahçe Sitesi No: 1/A Beylikdüzü / Istanbul |
| Contact | legal@teknikdanisman.net |
| KVKK Contact Person | kvkk@teknikdanisman.net |
| VERBIS Registration No | VERBIS registration is in progress; this field will be updated with the registration number once issued. Until then, data subject requests continue to be handled directly via the channels in Section 6. |
The following categories of data may be processed in the course of providing our service:
| Category | Data Type | Source |
|---|---|---|
| Identity | Name, surname, username, Turkish ID no. (only if the employer uploads it for HR documents) | User / Employer |
| Contact | Email address, phone, address | User / Employer |
| Employee | Position, department, start/end date, leave/warning records | Employer |
| Transaction security | IP address, session data, browser/device info, MFA status, audit log | Automatically collected |
| Technical access | Branch network configuration (static IP, subnet, gateway, DNS), modem/router panel credentials, service and license access credentials — all stored AES-256 encrypted | Employer |
| Employee usage / behaviour | SaaS tools used without IT approval (Shadow SaaS detection), usage frequency and department attribution — only when the Customer enables these features | Employer / automatically compiled |
| Financial | Billing address, payment method reference (card number stored by the payment provider, not by us) | User |
| Visual/audio | Profile picture, company logo | User / Employer |
| Purpose | Legal Basis (KVKK Art. 5/2) |
|---|---|
| Performance of the service agreement, creating and maintaining the user account | Formation or performance of a contract (c) |
| Billing, payment tracking, commercial and technical support | Legal obligation (a) / Performance of contract (c) |
| Security audit, fraud prevention, brute-force protection, audit logging | Legitimate interest of the controller (f) |
| Marketing communication (only with explicit consent) | Explicit consent (a) — Law No. 6563 |
| Providing tools to the Customer (employer) for running HR, IT security and asset-management operations — including shadow SaaS discovery, device and fleet health scoring, and license optimisation | Performance of contract (c) — we act as Data Processor for the Customer |
| Fulfilment of legal obligations (tax, commercial, KVKK, GDPR) | Legal obligation (a) |
Your personal data may be shared with the following third parties, only to the extent necessary to provide the service:
| Recipient Category | Data Type | Purpose | Location |
|---|---|---|---|
| Server infrastructure (Hetzner Online GmbH) | All panel data | Hosting | Germany (EU) |
| Email provider (Microsoft 365 / Google Workspace — provider the customer connects via OAuth) | Notification email content | Automated notification delivery | EU / US |
| Payment provider (PayTR) | Billing info | Collection | Türkiye |
| AI service provider (Groq) | Only user prompts entered in AI chat windows | Response generation | US — provider commits to not storing data |
| Error monitoring (Sentry) | Stack trace, request ID, user ID (only when configured) | Diagnosing errors | US — under SCC |
| Communication/support tools | Contact info + support message content | Customer support | EU / US |
Panel data is hosted within the EU (Hetzner, Germany). Cross-border transfers are made under appropriate safeguards (provider data processing agreement + EU Standard Contractual Clauses / SCC 2021/914) per KVKK Art. 9.
| Data Category | Retention |
|---|---|
| Active user account data | For the duration the account is active |
| Passive/deleted account data | Permanent deletion 60 days after account deletion |
| Audit log records | 6 months (for security investigation needs) |
| Invoice and commercial records | 5 years under Turkish Tax Procedure Law Art. 253, 10 years under the Turkish Commercial Code |
| Labour Law records (uploaded by the customer) | 10 years per Labour Law Art. 32 (customer's responsibility) |
As a data subject you have the following rights:
You can submit requests through three channels:
We respond free of charge within 30 days (KVKK Art. 13/2).
Our site uses cookies in 4 categories. On your first visit you can choose which categories to allow via the cookie banner, and change your choice later via the Cookie Preferences link. For the full list and legal bases see the Cookie Policy.
| Category | Example cookie | Purpose | Duration | Mandatory? |
|---|---|---|---|---|
| Necessary | PHPSESSID, td_remember, td_trusted_*, td_cookie_consent | Session, 2FA trusted device, security, preference record | Session / 30 days / 1 year | ✓ Legally required |
| Analytics | Google Analytics 4 (_ga, _ga_*) | Visitor count, page performance — anonymised IP | 12 months | Explicit consent (opt-in) |
| Preferences | Theme, language (localStorage) | User interface preference | Persistent (until cleared by user) | Explicit consent (opt-in) |
| Marketing | (not active — future advertising pixels) | Retargeting, conversion measurement | — | Explicit consent (opt-in) |
Unless you give explicit consent in the Analytics/Preferences/Marketing categories, those cookies are never loaded. Third-party sharing occurs only for Google Analytics (if analytics is enabled).
For a detailed security architecture see the Trust Center. Short summary:
Under KVKK Art. 12/5 and GDPR Art. 33-34, in the event a data breach is detected:
This notice may be updated in line with changes in legislation and the scope of our service. The current version is always published on this page; active users are notified by email for material changes.
If you are not satisfied with our response, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority:
www.kvkk.gov.tr · Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No:4 Balgat-Çankaya/ANKARA