KVKK Information Notice
Notice under Art. 10 of Turkish Law No. 6698 · last updated: 19 August 2026
Data controller
The data controller for this site is SMARTIA OOD (Burgas, Bulgaria). The controller is established in Bulgaria (EU) and is primarily subject to the GDPR ((EU) 2016/679) and the Bulgarian Personal Data Protection Act (ЗЗЛД). To the extent services are offered to users located in Türkiye, Turkish Law No. 6698 ("KVKK") also applies.
Personal data processed
While you are ONLY BROWSING the site, no personal data of yours is processed: no account is created, there is no sign-in and no cookie is placed on your device. Processing begins at a single point — when YOU submit the waitlist form on the Contact page. That form processes: your e-mail address (required), your name (optional), your message (optional), the area of interest you select, the site language you used, the moment you gave consent, and the time of the record. For security, your IP address is NOT stored in raw form; only a daily-rotating, irreversible digest is kept (and if the salt is not configured, no digest is produced at all). No special categories of personal data are requested, no location data is requested, and since no payment is taken, no financial data is processed.
Purposes of processing
Your record is processed solely to notify you when the platform launches, to send information matching the area of interest you chose, and to prevent abuse of the form (fake or automated bulk submissions). It is not used for advertising, is not shared with third parties and is not sold.
Legal basis
E-mail, name, message and area of interest: KVKK Art. 5/1 — YOUR EXPLICIT CONSENT (GDPR Art. 6(1)(a)). No record is created without consent and you may withdraw your consent at any time. Daily IP digest and bot protection: KVKK Art. 5/2-f — the controller's legitimate interest (site security).
Method of collection
Data is collected entirely by electronic means and directly from you, through the form on the Contact page. There is no other collection channel.
Transfers
Your data is not sold and is not shared for marketing. It is transferred only to the providers needed for the site to work — hosting (including the same provider's cookieless visitor measurement), the managed database, and bot protection (Cloudflare Turnstile) — for the purpose of delivering the service and on a limited basis. The database and serving region are within the European Union (Frankfurt). As the controller is likewise established in Bulgaria (EU), this processing stays within the EU: it is NOT a transfer to a third country under Chapter V GDPR and requires no additional transfer mechanism (SCCs or otherwise).
Retention
Waitlist records are kept until the platform launch announcement and for no longer than 24 months. If you withdraw your consent, your record is deleted. E-mail correspondence is deleted within a reasonable period after your request is resolved.
Your rights and how to apply
Under KVKK Art. 11 you have the right to learn whether your personal data is processed, to request information if it is, to learn whether it is used in line with its purpose, to know the third parties to whom it is transferred, to request rectification if it is incomplete or incorrect, to request erasure or destruction where the conditions are met, to request that these actions be notified to the third parties concerned, and to claim compensation if you suffer damage due to unlawful processing. You can submit your application through the Contact page; requests are concluded within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Board; if you are established in the European Union, the Bulgarian Commission for Personal Data Protection (CPDP/КЗЛД) or the data protection authority of your own country has jurisdiction.