KVKK privacy notice

Data controller

Pursuant to Law No. 6698 on the Protection of Personal Data (KVKK) (the "Law"), Asaf Efe Bağ (ÇİLE MAH. 7454 SK. No: 9 MENDERES/İZMİR; VKN 1300433960, MENDERES VERGİ DAİRESİ MÜD.) acts as the data controller with respect to the personal data of users of the İşlemde service and of visitors to our website.

Personal data processed

Identity (name, surname, TCKN (Turkish ID number)), contact (e-mail, phone, address), customer transaction (invoice, payment and subscription records), transaction security (IP address, session and sign-in records) and request/complaint data.

Purposes of processing

• Establishment and performance of the contract: opening an account, providing the service, support.
• Conducting finance and accounting activities: payments, invoices, collections.
• Conducting information security processes.
• Fulfilling legal obligations and providing information to competent authorities.
• Following up on requests and complaints.

Legal grounds

Your personal data is processed on the basis of the following legal grounds set out in paragraph 2 of Article 5 of the Law: processing is necessary for the establishment or performance of a contract (c), for the fulfillment of a legal obligation (ç), for the establishment, exercise or protection of a right (e), and for our legitimate interests, provided that this does not harm your fundamental rights and freedoms (f).

Collection method

Data is collected electronically through registration and payment forms, in-app actions, e-mail correspondence and system logs.

Transfers

Limited to the purposes above, your personal data may be transferred to the payment institution (iyzico), the e-invoice service provider (Paraşüt), our hosting, storage and e-mail service providers (Vercel, Railway, Cloudflare, Plunk), the artificial intelligence service we use to respond to support requests (Vercel AI Gateway and the model providers behind it; with e-mail and phone details masked), the providers through which businesses send SMS (Netgsm, İleti Merkezi, Verimor, Mutlucell), Meta Platforms for WhatsApp notifications (only when the business has connected it and the customer has accepted), and competent public institutions and organizations. The purpose and location of each provider are set out in the Privacy Policy.

The servers of Vercel, Railway, Cloudflare, Plunk and the AI model providers are located abroad (USA and European Union). These transfers are made with the appropriate safeguards provided for in Article 9 of the Law (such as the standard contracts published by the Personal Data Protection Board).

Your rights

Under Article 11 of the Law, you have the right to: learn whether your data is processed; request information if it has been processed; learn the purpose of the processing and whether the data is used in accordance with that purpose; know the third parties to whom it has been transferred; request its rectification if it has been processed incompletely or inaccurately; request its erasure or destruction within the framework of Article 7 of the Law; request that these actions be notified to the third parties to whom it has been transferred; object to an outcome against you arising from analysis exclusively by automated systems; and claim compensation for damage if you suffer damage due to unlawful processing.

You do not need to submit a request to have your account deleted: you can delete it yourself from the “Delete my account” section on the My account → Profile page. If you are the sole owner of a business, you must delete that business first.

Applications

You can submit your requests, together with information verifying your identity, by e-mail to destek@islemde.app, to our registered electronic mail (KEP) address, or in writing to ÇİLE MAH. 7454 SK. No: 9 MENDERES/İZMİR. Our KEP address: asafefe.bag@hs01.kep.tr. Your application will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, the fee schedule set by the Personal Data Protection Board may be applied.