Home / KVKK Disclosure Statement

KVKK Disclosure Statement

ℹ️ About this notice: This statement is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and applies to data subjects resident in Türkiye whose personal data is processed by Serkan Kısa (Sole Proprietor). For UK GDPR information, see Privacy Policy.

1. Identity of the Data Controller

Data Controller: Serkan Kısa (Sole Proprietorship — Türkiye)
Tax Office / Tax Number: Ataşehir Vergi Dairesi / 5581289828
Address: Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul Sitesi C1 Blok Kat 25, No:376, Ataşehir/İstanbul, Türkiye
Email: info@kisadigital.com

2. Categories of Personal Data Processed

Identity (name, surname, Turkish national ID)
Contact (email, phone, address)
Customer transactions (orders, invoices, payments)
Security (IP, logs, sessions)
Marketing (subject to explicit consent)

3. Purposes of Processing

Execution of sales and contractual processes
Financial and accounting management
Customer relationship management
Tracking of requests and complaints
Information-security operations
Provision of information to competent authorities
Marketing/campaign processes (only on explicit consent)

4. Recipients of Transfers and Purposes

Competent public authorities — for legal obligations
Suppliers (hosting, email, e-invoice, payment, KEP) — for service delivery
Legal/accounting advisors — under professional confidentiality

International transfers are made under KVKK Art. 9 to adequate-protection countries or based on written undertakings.

5. Collection Methods and Legal Grounds

Data is collected via website forms, account registration, the order process, support requests, and email, by automated or partially-automated means. Legal grounds:

Contract performance (Art. 5/2-c)
Legal obligation (Art. 5/2-a, ç)
Legitimate interest (Art. 5/2-f)
Explicit consent (Art. 5/1) — for marketing only

6. Data Subject Rights (Art. 11)

Under KVKK Art. 11 you may:

Learn whether your data is processed
Request information about processing
Learn the purpose of processing and whether it is used accordingly
Know domestic/foreign recipients of transfers
Request rectification of incomplete/incorrect data
Request erasure where grounds have ceased
Request notification of rectification/erasure to recipients
Object to outcomes of automated analysis
Claim damages caused by unlawful processing

7. How to Apply

In accordance with the Communiqué on Data Subject Applications, you can apply:

In writing with wet signature to our address,
Via KEP (Turkish Registered Electronic Mail),
To info@kisadigital.com using secure electronic signature / mobile signature.

Applications are answered within 30 days, in principle free of charge. If a fee applies, the official tariff set by the Personal Data Protection Authority applies.

This notice covers KVKK only. For UK GDPR rights see the UK section of Privacy Policy.