KVKK Disclosure Statement

1. Identity of the Data Controller

Your personal data is processed by us, as data controller, whose identity and contact details are set out below:

Data Controller

Onur Karabeyoğlu ("Kodakod")

Address

Kirazlı Mah. 1110. Sk. No: 19 İç Kapı No: 7 Bağcılar / İstanbul

Tax Office / No.

Kocasinan Vergi Dairesi — 19409346084

Email

merhaba@kodakod.com

Website

kodakod.com

2. Personal Data We Process

Depending on your use of our website and your communication with us, the following categories of personal data are processed:

• Identity data: first and last name (contact form, blog comments).
• Contact data: email address and phone number (contact form).
• Customer transaction / request data: the message, subject and content of the request you submit.
• Transaction security data: IP address, browser (user-agent) information, form submission time and bot-protection verification data.
• Usage / analytics data: site usage statistics collected via cookies that run subject to your consent.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• receiving, assessing and responding to the requests you submit via the contact form and other channels,
• carrying out information and quotation processes relating to the services we offer,
• moderating and publishing the comments you make on blog content,
• ensuring the security of the website and preventing abuse and bot activity,
• measuring site usage and improving the user experience where you have given your consent,
• fulfilling our legal obligations and protecting our rights in the event of any dispute.

4. Legal Bases for Processing Personal Data

Your personal data is processed on the following legal bases set out in Article 5 of the KVKK:

• Your explicit consent — solely with respect to analytics/statistics cookies (Art. 5/1).
• Processing being necessary for the establishment, exercise or protection of a right (Art. 5/2-e).
• Processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject — with respect to responding to your request and site security (Art. 5/2-f).
• Processing being expressly provided for by law and the fulfilment of a legal obligation (Art. 5/2-a and 5/2-ç).

5. Transfer of Personal Data

To the extent necessary to achieve the purposes above, and in accordance with Articles 8 and 9 of the KVKK, your personal data may be shared with the following parties:

• Service providers (domestic / abroad): suppliers providing infrastructure for website hosting, email delivery, bot protection (Cloudflare Turnstile) and consent-based analytics services (Google Analytics).
• Authorized public authorities and institutions: solely as limited to obligations arising from applicable legislation and official requests.

Transfers made through service providers located abroad are carried out under the conditions set out in Article 9 of the KVKK and, where necessary, on the basis of your explicit consent.

6. Method of Collecting Personal Data

Your personal data is collected electronically, by automated and partly automated means, through the contact and comment forms on our website, email correspondence, and cookies and similar technologies used during your use of the site.

7. Retention Period for Personal Data

Your personal data is retained for as long as necessary for the purposes for which it is processed, taking into account the limitation periods provided for in applicable legislation and our retention obligations. Once the purpose ceases to exist or the applicable periods expire, your data is deleted, destroyed or anonymized. The retention periods of consent-based cookies are set out in the Cookie Policy.

8. Your Rights as a Data Subject

Pursuant to Article 11 of the KVKK, by applying to the data controller you have the following rights in relation to yourself:

• to learn whether your personal data is being processed,
• to request information if your personal data has been processed,
• to learn the purpose of processing your personal data and whether it is used in line with that purpose,
• to know the third parties in Turkey or abroad to whom your personal data is transferred,
• to request the correction of your personal data where it has been processed incompletely or inaccurately,
• to request the deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK,
• to request that any correction, deletion or destruction be notified to the third parties to whom your data has been transferred,
• to object to any outcome to your detriment that results from the analysis of your data solely through automated systems,
• to claim compensation for damage where you suffer harm due to the unlawful processing of your personal data.

9. Exercising Your Rights and How to Apply

You may submit your requests regarding the rights listed above, together with information verifying your identity, by email to merhaba@kodakod.com or in writing to our postal address set out above. Depending on its nature, your request will be concluded free of charge as soon as possible and within thirty days at the latest; however, if the process entails an additional cost, a fee as set out in the tariff determined by the Personal Data Protection Board may be charged.

10. Changes

This Privacy Notice may be revised in line with legislative changes and updates to our data processing practices. The current text is always published on this page. For detailed information on the processing of your personal data, you may also review our Privacy Policy and Cookie Policy pages.