Privacy Policy and KVKK Notice

Last updated: [date]

Draft

This text is a draft and will not be published before approval by the legal team. Fields in square brackets are placeholders.

This notice explains, under Turkish Personal Data Protection Law No. 6698 (KVKK), how your personal data is processed when you use the TOG Platform website and mobile app.

1. Data controller

Your personal data is processed by [Kurum adı] ([adres]) as the data controller.

You can reach the data controller at [e-posta].

2. Personal data we process

The following categories of data may be processed when you use the platform:

  • Identity and contact: first and last name, email address, phone number
  • Profile: profile photo, bio and other information you add to your profile
  • Participation records: event, project and community participation, check-in records
  • Device and crash data: device model, operating system version, app version and error reports
  • Account security: session information and sign-in records

3. Purposes of processing

Your personal data is processed only for the following purposes:

  • Creating and managing your account
  • Running events, projects and community activities, including attendance and certificate processes
  • Sending you notifications and information
  • Keeping the platform secure and detecting and fixing errors
  • Meeting legal obligations

4. Legal basis

Under KVKK Art. 5, your data is processed on the grounds of establishing or performing a contract, complying with a legal obligation, legitimate interests and, where needed, your explicit consent.

Marketing messages are sent only with your explicit consent, which you can withdraw at any time.

5. Retention period

Your data is kept for as long as the purpose requires and for the periods set by applicable law. After that it is deleted, destroyed or anonymized.

When you delete your account, your personal data is deleted within [retention period]; records that must be kept by law are excluded.

6. Sharing with third parties

To provide the service, your data may be shared, only as far as necessary, with the following providers:

  • Email delivery provider: [provider name]
  • Cloud storage provider: [provider name]
  • Crash and error reporting service: [provider name]
  • Public authorities authorized by law

7. Your rights (KVKK Art. 11)

Under KVKK Art. 11 you may apply to the data controller to exercise the following rights:

  • Learn whether your personal data is processed
  • Request information if it has been processed
  • Learn the purpose of processing and whether it is used accordingly
  • Know the third parties to whom data is transferred in Türkiye or abroad
  • Request correction of incomplete or inaccurate data
  • Request deletion or destruction under KVKK Art. 7
  • Request that corrections and deletions be notified to third parties the data was transferred to
  • Object to an outcome against you resulting from analysis by automated systems
  • Claim compensation if you suffer damage from unlawful processing

8. Account deletion

You can delete your account yourself with the "Delete my account" option in the app. Deletion cannot be undone.

If you cannot use the app, send your deletion request to [e-posta].

9. Contact

For questions about this notice or your rights, contact [Kurum adı], [adres], [e-posta].