Personal Data Protection Notice

DerdiniPaylaş ( derdinipaylas.com ) values the protection of your personal data. This notice has been prepared to inform you, as the data controller, in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), the data protection regulations of the Turkish Republic of Northern Cyprus, and the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller for personal data processed on this Platform is DerdiniPaylaş. You can contact us through the contact page or at destek@derdinipaylas.com .

2. Personal Data We Process

• Identity data: name, username
• Contact data: email address, phone number (optional)
• Account security data: password hash, session information
• Transaction and usage data: complaints, comments, votes, saved content
• Device and connection data: IP address, browser and device information
• Preference data: notification preferences, language and location preferences

3. Purposes of Processing

• User registration, authentication, and account security
• Publication and management of user-generated content (complaints, comments, votes)
• Delivery of transactional notifications related to your account
• Platform security, abuse prevention, and compliance with legal obligations
• Statistical analysis and service quality improvement (using anonymized data)

We do not send marketing emails. Notifications are delivered only for events directly related to your account, in line with your stated preferences.

4. Legal Basis

Your data is processed under Article 5/2 of KVKK on the grounds of contract performance, legal obligations, and legitimate interest. Where explicit consent is required, we will obtain it from you separately.

5. Data Sharing

To deliver our service, your data may be shared with the following service providers:

• Database infrastructure (Neon)
• Hosting, authentication and storage infrastructure (Vercel)
• Transactional email delivery (Resend)
• SMS verification (Twilio)
• Public authorities — where required by law

For cross-border data transfers, we ensure that the recipient country provides adequate protection or that appropriate safeguards (e.g., standard contractual clauses) are in place under Article 9 of KVKK.

6. Retention Period

We retain your data for as long as required by applicable laws and the service. When you delete your account, your profile, email, and contact information are permanently anonymized; complaints and comments you posted remain on the platform anonymously to benefit other users.

7. Your Rights Under KVKK Art. 11

By contacting the data controller you may:

• Learn whether your personal data is being processed,
• Request information if it is processed,
• Learn the purpose of processing and whether the data is used for that purpose,
• Know the third parties to whom data has been transferred (domestically or abroad),
• Request rectification of incomplete or inaccurate data,
• Request erasure or destruction within the conditions set by law,
• Object to outcomes that result solely from automated analysis,
• Request compensation for damages arising from unlawful processing.

8. Notification Preferences

You can manage your notification preferences at any time on the Notification Preferences page and toggle in-app and email channels per event type.

9. Contact and Requests

To exercise your rights under Article 11 of KVKK, please write to destek@derdinipaylas.com . Your requests will be processed free of charge, as soon as possible and within thirty days at the latest.