Personal Data Protection Clarification Text

As En İyisi Yazılım Aracılık İletişim Hizmetleri Tic. A.Ş. ("En İyisi" or "Company"), we respectfully approach the processing and protection of personal data in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK").

With this Clarification Text, we aim to accurately inform you regarding how your personal data is collected, the purposes for its processing, whom it may be transferred to, our legal reasons, and your rights in this respect.

1. Data Controller

Pursuant to the KVKK, the Data Controller is En İyisi Yazılım Aracılık İletişim Hizmetleri Tic. A.Ş.

Contact Information:

• Email: kvkk@eniyisi.app
• Address: [Company Registration Address Will Be Added Here]

2. Processed Personal Data

Depending on your interaction with our platform (as a customer or service provider), the following personal data may be processed:

2.1. Customer Data

• Identity Information: Name, surname
• Contact Information: Email address, phone number
• Location Information: Province/district preference, GPS location (with explicit consent)
• Transaction Security Information: IP address, application log records
• Financial Information: Payment transactions (payments are securely managed via iyzico; we do not store full credit card numbers)
• Customer Transaction Information: Service request details, messages, reviews, ratings

2.2. Service Provider Data

• Identity Information: Name, surname, T.C. Identification Number (for tax/invoicing purposes)
• Contact Information: Email address, phone number
• Professional Information: Operating region, sector, sub-categories, experience, past job photos
• Financial Information: IBAN number, billing info, credit balance
• Transaction Security Information: IP address, device details
• Performance Information: Customer ratings, completed job count, response times

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Fulfilling Contractual Demands: Allowing account creation, identity verification, and matchmaking between customers and professionals
• Platform Operations: Processing service requests, delivering quotes, and enabling messaging
• Security: Preventing fraud, ensuring security of transactions via IP logs, and system protection
• Legal Obligations: Fulfilling tax requirements and assisting official authorities upon legal request
• Quality Improvement: Evaluating satisfaction, tracking performance, and analyzing anonymous user behavior

4. Transfer of Personal Data

Your personal data may be transferred to the following parties when strictly necessary and in accordance with KVKK Article 8 and Article 9:

• Service Providers / Customers: Critical identifying info (name, location) is shared between parties to facilitate the requested job.
• Authorized Public Institutions: In case of legal requirements or official investigations (such as courts and regulatory authorities).
• Infrastructure and Technology Partners: (e.g., Supabase, Cloudinary) who strictly act on our behalf to host data and send notifications.
• Payment Institutions: Information is transferred to iyzico or designated payment gateways to finalize billing and account credit transactions.

Note: We strictly prohibit selling your data to 3rd party advertising or data-broker companies.

5. Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected electronically (via forms, mobile application entries, GPS data, and logs). Our legal grounds for processing are:

• It is necessary for the establishment or execution of a contract (KVKK Art. 5/2-c)
• It is mandatory for fulfilling our legal obligations (KVKK Art. 5/2-ç)
• Data processing is mandatory for our legitimate interests, provided your fundamental rights and freedoms are not harmed (KVKK Art. 5/2-f)
• In circumstances falling outside the above, upon your explicit consent (KVKK Art. 5/1).

6. Your Rights Under KVKK Article 11

As a data subject, you hold the following rights over your personal data:

1. To learn whether your personal data is processed
2. To request information if processed
3. To learn the purpose of processing and if it is used appropriately
4. To know the third parties to whom data is transferred
5. To request correction if incomplete or inaccurate
6. To request deletion or destruction of your personal data
7. To object to negative consequences resulting from automated processing
8. To claim compensation for damages due to unlawful processing

To exercise your rights, please submit a written request via email to kvkk@eniyisi.app using your registered email address, or send a physical document to our official company address in accordance with standard legal procedures. We assure a response within 30 days free of charge.

←