KVKK Notice

Last updated: July 18, 2026

1. Data Controller

Within the meaning of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by [Name/Entity] ("Edebiyatla" or the "Data Controller") as data controller, to the extent described below.

• Address: [Address]
• Email: [email protected]

2. Personal Data We Process

• Identity and contact data: first name, last name, username, email address
• Account security data: hashed password, session and security logs
• User content: poems, posts, comments and messages you share; avatar and biography
• Interaction data: likes, bookmarks, follows, notification preferences
• Technical data: IP address, browser and device information, language and appearance preferences

3. Purposes of Processing

• Creating and managing your membership account
• Providing the Platform services (content sharing, comments, follows, messaging)
• Sending password reset and essential service notifications
• Ensuring Platform security and preventing abuse
• Fulfilling legal obligations and responding to official requests

4. Legal Bases for Processing

Your personal data is processed based on the following legal grounds under Article 5 of KVKK (and, where the GDPR applies, the corresponding GDPR bases):

• Necessity for the establishment or performance of a contract (membership agreement)
• Necessity for compliance with a legal obligation of the controller
• Necessity for the establishment, exercise or defense of legal claims
• Data made public by the data subject (content you publish openly)
• Legitimate interests of the controller, provided your fundamental rights and freedoms are not harmed

Where explicit consent is required, it is obtained separately and may be withdrawn at any time.

5. Transfers of Personal Data

Your personal data is transferred to the infrastructure providers we use to achieve the purposes above:

• Hosting: Hetzner (Germany / European Union)
• File storage: Cloudflare R2
• Email delivery: SMTP service provider

International transfers comply with Article 9 of KVKK (and Chapter V GDPR where applicable). Data may also be disclosed to competent public authorities where legally required.

6. Retention

Your personal data is retained for as long as your membership continues and as required by the processing purposes. Upon termination of membership or your deletion request, your data is deleted, destroyed or anonymized, subject to statutory retention periods.

7. Your Rights (KVKK Art. 11 / GDPR)

You have the right to:

1. Learn whether your personal data is processed
2. Request information about the processing
3. Learn the purpose of processing and whether data is used accordingly
4. Know the third parties to whom data is transferred, in Türkiye or abroad
5. Request rectification of incomplete or inaccurate data
6. Request erasure or destruction under the conditions of KVKK Art. 7
7. Request that rectification/erasure be notified to third parties to whom data was transferred
8. Object to a decision based solely on automated processing that produces adverse effects
9. Claim compensation for damages arising from unlawful processing

Where the GDPR applies, you additionally have the rights to restriction of processing and data portability, and the right to lodge a complaint with a supervisory authority.

8. How to Exercise Your Rights

Under Article 13 of KVKK and the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may submit your requests:

• By email: to [email protected], together with information verifying your identity.

Requests are answered free of charge as soon as possible and no later than 30 days. If the process requires additional cost, the fee set by the Turkish Personal Data Protection Board may be charged.