Privacy Policy and KVKK
Last update: 19 July 2026
Effective Date: 01 January 2024
Table of Contents
1. Introduction and General Information
As :site_name, protecting the privacy of your personal data is extremely important to us. This privacy policy explains how we collect, use, store and protect your personal data.
As a platform, we fully comply with the requirements of Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union General Data Protection Regulation (GDPR).
KVKK Compliant
Full compliance with Law No. 6698
GDPR Compliant
EU data protection standards
SSL Security
256-bit encryption protection
2. Data Controller
Company Information
- Title: [Şirket Adı]
- Address: [Şirket Adresi]
- Tax Office: [Vergi Dairesi]
- Tax Number: [Vergi Numarası]
Contact Information
- Email: [email protected]
- Phone: 05450000000
- KVKK Contact: [email protected]
- KEP: [email protected]
3. Collected Personal Data
3.1 Data Collected During Registration
- Identity Information: Name, surname, username
- Contact Information: Email address, phone number
- Account Security: Password (encrypted)
- Account Type: Individual/Business user classification
3.2 Data Collected During Platform Usage
Technical Information
- • IP address and location data
- • Browser type and version
- • Operating system
- • Device information
- • Screen resolution
Usage Information
- • Site usage statistics
- • Search history
- • Favorite places and events
- • Comments and ratings
- • Visited pages
3.3 Automatically Collected Data
- Cookie Data: Session IDs, preferences, authentication tokens
- Log Records: Access times, error logs, security logs
- Analytics Data: Page views, session durations, conversion rates
- Performance Metrics: Page load times, error rates
3.4 Optional Data
Information you may optionally share to improve your user experience:
- Profile photo
- Date of birth
- Gender
- Interests
- Social media accounts
- Photos and videos
- Biography and description
- Location information (GPS)
4. Purposes of Data Processing
We process your personal data only for the following legitimate purposes:
Service Provision
- Creating and managing user accounts
- Providing platform services
- Delivering personalized content
- Improving search results
Communication and Support
- Account-related notifications
- Security alerts
- System updates
- Customer support services
Security
- Ensuring account security
- Fraud detection and prevention
- Preventing spam and abuse
- Legal compliance
Analysis and Improvement
- Monitoring platform performance
- Improving user experience
- A/B testing and feature trials
- Trend analysis and reporting
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to improve user experience, analyze site performance and deliver personalized content. You can manage your cookie preferences at any time.
5.1 Necessary Cookies
These cookies are essential for the site to function properly. The site will not work correctly without them. These cookies include:
- Session cookies
- Security cookies
- Language preference cookies
- Cookie consent status
5.2 Analytics and Performance Cookies
Used to analyze site usage, understand visitor behavior and make improvements.
- Google Analytics: Visitor statistics, page views, session durations
- Google Tag Manager: Tag management and tracking codes
- Heatmap tools: User interaction maps
- Performance metrics: Page load times, error logs
5.3 Advertising and Marketing Cookies
Used to display personalized advertisements and measure advertising performance. You have the right to reject these cookies.
- Google AdSense: Targeted ad display
- Google DoubleClick: Ad serving and tracking
- Remarketing cookies: Remarketing campaigns
- Social media cookies: Facebook, Twitter, Instagram integrations
5.4 Third-Party Cookies
Cookies from third-party service providers may also be used on our platform:
- Advertising networks (Google AdSense, etc.)
- Social media platforms
- Content delivery networks (CDN)
- Video players (YouTube, Vimeo)
5.5 Cookie Management
You can manage, block or delete cookies from your browser settings. However, blocking some cookies may affect site functionality. You can use the cookie management panel on our site to change your cookie preferences.
6. Data Sharing and Third-Party Services
6.1 Advertising Services
We use advertising networks to generate revenue and provide free services on our platform:
- Google AdSense: Google's advertising service displays ads on our site. Google uses the DART cookie to show you ads based on your visits to this site and other sites on the Internet. You can visit the Google Advertising and Content Network Privacy Policy page to disable the use of the DART cookie.
- Personalized Ads: Ads customized based on your interests are displayed. You can use Google Ad Settings to manage these ads.
- Ad Partners: Third-party advertising companies may also publish ads on our site and use their own cookies.
6.2 Google Services
The following Google services are used on our site:
- Google Analytics: Visitor analytics and site usage statistics
- Google Maps: Map and location services
- Google Fonts: Web fonts
- reCAPTCHA: Bot protection and security
- YouTube API: Video content display
These services are subject to Google's privacy policy: https://policies.google.com/privacy
6.3 Social Media Integrations
Our site works integrated with the following social media platforms:
- Facebook (Meta): Social login, sharing features, Facebook Pixel
- Twitter (X): Tweet sharing and social integration
- Instagram: Content display and sharing
- LinkedIn: Professional network integration
These platforms have their own privacy policies and by using these platforms you accept their privacy policies.
6.4 Payment Service Providers
We use reliable third-party payment service providers for payment processing:
- PayTR: Credit card and online payment infrastructure
- PCI-DSS Compliance: Your payment information is processed in accordance with PCI-DSS standards
- Data Storage: We do not store your credit card information, all transactions are made through a secure gateway
6.5 Analytics and Statistics Tools
- Google Analytics: Visitor behavior analysis
- Hotjar/Clarity: User experience analysis and heatmap
- SEMrush/Ahrefs: SEO performance tracking
6.6 Sharing with Third Parties
We may share your personal data in the following circumstances:
- Due to legal obligations (court order, legal proceedings)
- To prevent security breaches and fraud
- To protect our rights, property or safety
- With your explicit consent
- In the event of merger, acquisition or asset sale
6.7 Service Providers
We work with reliable third-party providers for the following services:
- Cloud hosting services (AWS, DigitalOcean, etc.)
- Email delivery services (SendGrid, Mailgun, etc.)
- SMS notifications
- CDN services (Cloudflare, etc.)
- Customer support platforms
- CRM systems
These companies may only use your data for the specified purposes and are bound by confidentiality agreements.
7. Data Security and Protection Measures
We take comprehensive technical and administrative measures to ensure the highest level of security for your personal data. Your data is protected with 256-bit SSL encryption and stored on secure servers.
7.1 Technical Security Measures
- SSL/TLS Encryption: All data transfers are encrypted with 256-bit SSL certificate
- Secure Server Infrastructure: Firewall protected and isolated servers
- Data Encryption: Sensitive data is stored encrypted in the database
- DDoS Protection: Attack protection with Cloudflare and similar services
- Two-Factor Authentication (2FA): Extra protection layer for account security
- Secure Password Policy: Passwords are hashed with bcrypt/argon2 algorithm
7.2 Infrastructure Security
- Regular security updates and patches
- Automatic backup system (daily, weekly, monthly)
- Disaster recovery plan
- Access control lists (ACL)
- IP-based restrictions and rate limiting
- Intrusion Detection System (IDS)
7.3 Security Tests and Audits
- Regular penetration tests (every 3-6 months)
- Vulnerability scans (weekly automatic)
- Code security audits
- OWASP Top 10 compliance
- Third-party security audits
7.4 Administrative and Organizational Measures
- Staff security training (annual)
- Non-disclosure agreements (NDA)
- Role-based access authorization
- Security incident response plan
- Data processing records
- Data controller appointment
7.5 Data Breach Notification
In the event of any data breach, affected users and relevant regulatory authorities (Personal Data Protection Authority) will be notified within the legal period (72 hours). The breach notification includes:
- Type and scope of the breach
- Affected data categories
- Measures taken
- What users should do
- Contact information
8. Data Retention Periods and Disposal
8.1 Retention Periods
Your personal data is stored for the period determined in accordance with the processing purpose:
- Account information: As long as the account is active or 1 year after account deletion
- Transaction records: 10 years (pursuant to Tax Procedure Law and Turkish Commercial Code)
- Invoice and accounting records: 10 years
- Log records: 6 months - 2 years (depending on log type)
- Security records: 2 years
- Marketing data: Until consent is withdrawn or maximum 3 years
- Cookie data: 1-24 months depending on cookie type
- Communication records: 3 years
- Complaint and request records: 5 years
- Analytics data: 26 months (Google Analytics standard retention period)
8.2 Data Disposal Methods
Upon expiration of the retention period or upon your deletion request, your data is securely disposed of using the following methods:
- Data in electronic environment: Irreversibly deleted (overwriting)
- Database records: Permanently deleted and removed from backups
- Backup records: Cleared within automatic backup cycles
- Log records: Anonymization or complete deletion
- Physical records: If any, destroyed by cross-cut shredding
8.3 Legal Retention Obligations
Some data must be stored for certain periods due to legal regulations:
- Tax Procedure Law: Financial records 10 years
- Turkish Commercial Code: Commercial books 10 years
- Law No. 6698 KVKK: Pursuant to relevant legislation provisions
- Law on Regulation of Electronic Commerce: Contract records 10 years
9. Personal Data Rights (KVKK)
Your rights under KVKK:
9.1 Fundamental Rights
- Learn whether your personal data is being processed
- Request information about your processed personal data
- Learn the purpose of processing and whether they are used in accordance with their purpose
- Know the third parties to whom personal data is transferred domestically or abroad
9.2 Correction and Deletion Rights
- Request correction if personal data is incomplete or incorrectly processed
- Request deletion or destruction of personal data if conditions are met
- Request notification of correction and deletion operations to third parties to whom personal data is transferred
9.3 Objection and Complaint Rights
- Object to the conclusion of a result against the person by analyzing the processed data exclusively through automated systems
- Request compensation for damages due to unlawful processing of personal data
- File a complaint with the Personal Data Protection Board
10. Application Methods
To exercise your personal data rights:
Contact Information
Email:: [email protected]
Postal Address:: Keşif360, Samsun, Türkiye
KEP:: [email protected]
10.1 Application Requirements
- Your application letter must be written in Turkish
- You must attach identification documents
- You must state your request clearly and understandably
- You must provide correct contact information
10.2 Response Times
- Your applications will be answered within 30 days at the latest
- If a fee is requested, the KVKK tariff will be applied
- In case of rejection, the reason will be stated
11. Changes and Notifications
11.1 Policy Updates
We may update this privacy policy when necessary. Reasons for updates:
- Changes in legal regulations
- New features and services
- Technological developments
- Security improvements
- User feedback
11.2 Change Notifications
Important changes will be notified through the following methods:
- Email notification (to registered email address)
- Pop-up notification on the platform
- Announcement banner on the homepage
- Request for approval on login screen
11.3 Changes Taking Effect
Notice will be given 30 days in advance for important changes, and by continuing to use the platform during this period, you will be deemed to have accepted the changes. If you do not accept, you have the right to close your account.
11.4 Policy History
We recommend that you check the current policy regularly. You can contact us to access previous versions.
12. Children's Privacy
Our platform is not intended for use by individuals under 18. Users under 18 must use the platform with parental or guardian consent.
12.1 Protection of Children's Data
- We do not knowingly collect data from children under 13
- Parental consent is mandatory for users under 18
- If child data is detected, it is immediately deleted
- Parents can view and delete their children's data
12.2 Parental Controls
Parents can contact us at :email to review, update or delete their children's personal data.
13. International Data Transfers
Some of our service providers operate outside of Turkey. In this case, your personal data may be transferred abroad.
13.1 Countries of Transfer
- European Union countries (GDPR compliant)
- United States (with Privacy Shield or Standard Contractual Clauses)
- Other countries with adequate level of protection
13.2 Transfer Safeguards
The following safeguards have been taken for international data transfers:
- European Union Standard Contractual Clauses (SCC)
- Transfer to countries with adequacy decision
- Data processing agreements (DPA)
- Obtaining explicit consent
14. Legal Compliance and Regulations
14.1 KVKK Compliance
Our platform is fully compliant with the Law No. 6698 on the Protection of Personal Data (KVKK). We carry out our data processing activities in accordance with the principles and rules determined by the Personal Data Protection Authority.
14.2 GDPR Compliance
We act in accordance with GDPR (General Data Protection Regulation) requirements when processing data of European Union citizens:
- Legal bases for data processing (legitimate interest, consent, contract)
- Right to data portability
- Right to be forgotten
- Data processing records
- Data protection impact assessment (DPIA)
14.3 E-Commerce Legal Compliance
- Law No. 6563 on Regulation of Electronic Commerce
- Law on Protection of Consumers
- Regulation on Distance Contracts
- Regulation on Commercial Communication and Commercial Electronic Messages
14.4 Tax and Accounting Compliance
- Tax Procedure Law requirements
- E-Invoice and E-Archive regulations
- Financial record keeping obligations
15. Ad Networks and Third-Party Identifiers
15.1 Google AdSense and DoubleClick DART Cookie
Google, as a third-party advertising service provider, displays ads on our site. Google's use of the DART cookie enables it to serve ads to users based on their visits to this site and other sites on the Internet.
Users can opt out of the DART cookie by visiting the Google advertising and content network privacy policy page: https://policies.google.com/technologies/ads
15.2 Ad Personalization
Google AdSense uses the following information to display personalized ads:
- Browsing history
- Search queries
- Location information (approximate)
- Demographic information (age range, gender)
- Interests and habits
15.3 Managing Ad Preferences
To manage or disable personalized ads:
- Google Ads Settings - Turn off personalized ads
- DAA Opt-Out - Opt out from multiple ad networks
- NAI Opt-Out - Network Advertising Initiative
- Your Online Choices - Ad preferences for European users
15.4 Other Ad Partners
Third-party ad servers or ad networks on our site may use JavaScript, web beacons and other technologies in their advertisements and links. These technologies are sent directly to your browser and automatically receive your IP address. They are used to measure the effectiveness of advertising campaigns and/or personalize the ad content you see.
16. User Consent and Approvals
16.1 Explicit Consent
Explicit consent is obtained for certain data processing activities:
- Marketing communications (email, SMS, push notifications)
- Use of location data
- Cookie usage (except mandatory ones)
- Processing of sensitive personal data
- Third-party data sharing
16.2 Consent Management
You may withdraw your consent at any time:
- Change your preferences from account settings
- Use the unsubscribe link in emails
- Update your cookie settings
- Contact us to make a request
16.3 Scope of Permission
By using our platform, you agree to the following:
- That you have read and understood this privacy policy
- That you accept the Terms of Use
- That you approve the Cookie Policy
- That you allow your personal data to be processed as described
17. Contact and Support
You can contact us for questions about our privacy policy, to exercise your personal data rights or to file a complaint:
Contact Information
General Contact: [email protected]
KVKK Contact: [email protected]
Data Controller: [email protected]
Phone: +90 (212) 000 00 00
KEP Address: [email protected]
Postal Address: Keşif360, Samsun, Türkiye
Working Hours: Monday-Friday 09:00-18:00
Related Pages
Important Reminders
- This privacy policy was last updated on 19 July 2026.
- By using our platform, you declare that you have read and accepted this policy.
- Your data protection and privacy is our priority.
- You can contact us to exercise your personal data rights.
- You can change your cookie preferences at any time.
Our Security Commitment
As Keşif360, we are committed to maintaining the highest level of security for our users' personal data. We protect your data with SSL encryption, secure servers and regular security audits.
2026 Keşif360. All rights reserved.
Version: 2.0 | KVKK and GDPR Compliant
This privacy policy is prepared in accordance with the laws of the Republic of Turkey.