KVKK Information Notice (Turkey)
Data Controller
For the purposes of Turkish Law No. 6698 on the Protection of Personal Data (KVKK), the data controller is:
Investhub Yazılım ve Teknoloji Hizmetleri A.Ş.
(Investvio brand)
Esentepe Mah. Büyükdere Cad. Levent 199 No: 199, Inside Door:6 Şişli/ İstanbul
[email protected]
This notice is intended to provide information, in English, about how we process personal data of individuals whose data are subject to the KVKK (for example, users, customers and other data subjects located in Türkiye).
1. Purposes of Processing Personal Data
We process your personal data for purposes including:
- Enabling you to benefit from Investvio’s products, tools and services,
- Personalising content and services based on your usage, preferences and needs,
- Informing you about new products, services and features,
- Managing recruitment and human resources processes,
- Responding to your questions, support requests and complaints,
- Ensuring the security of our systems, data and users by implementing appropriate technical and organisational measures,
- Measuring and improving customer satisfaction and service quality,
- Developing, improving and expanding our services,
- Enabling integrations with social networks and other platforms,
- Fulfilling our legal obligations, including those under KVKK and other applicable laws.
Your personal data may be processed on the legal bases set out in Articles 5 and 6 of the KVKK, including:
- Where it is expressly provided for by law,
- Where processing is necessary for us to fulfil our legal obligations,
- Where processing is directly related to the conclusion or performance of a contract,
- Where processing is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed,
- Where you have given your explicit consent, where required.
2. Scope
This notice applies to the processing of personal data by Investhub in connection with:
- Users and visitors of the Investvio Platform,
- Customers, business partners and suppliers,
- Employees, job candidates and other individuals whose personal data we process in Türkiye.
Our internal data protection policies are designed to comply with KVKK, other applicable Turkish regulations and relevant international standards.
3. Transfer of Personal Data
Except for the exceptions provided under KVKK, your personal data will not be transferred to third parties without your explicit consent.
Within the scope of Articles 8 and 9 of KVKK, your personal data may be transferred to:
- Legal and professional advisers (such as lawyers, auditors and tax consultants) to ensure lawful operations and enable us to exercise our rights in potential disputes,
- Authorised representatives and attorneys acting under your mandate, for the execution of authorised transactions,
- Regulatory and supervisory authorities (courts, enforcement offices and other competent public bodies) where we are legally obliged to do so.
4. Methods and Legal Grounds for Collecting Personal Data
We may collect personal data orally, in writing or by electronic means, for example:
- Through our website and mobile applications,
- Via membership and application forms, contracts and other commercial documents,
- Through email and other communication channels,
- Through social networks, newsletters and similar digital tools,
- Via third parties that process data on our behalf.
Your personal data are processed and, where necessary, transferred in accordance with the legal grounds specified in Articles 5 and 6 of the KVKK.
5. Your Rights Under KVKK (Article 11)
As a data subject under KVKK, you have the following rights:
- To learn whether your personal data are being processed,
- If your data have been processed, to request information regarding such processing,
- To learn the purpose of processing and whether your data are used in accordance with that purpose,
- To learn the identity of third parties in Türkiye or abroad to whom personal data are transferred,
- To request the rectification of incomplete or inaccurate data,
- To request the deletion or destruction of personal data where the reasons for processing no longer apply,
- To request that such rectification, deletion or destruction be notified to third parties to whom personal data have been transferred,
- To object to results that are to your detriment arising from the analysis of data exclusively by automated systems,
- To request compensation if you suffer damage due to unlawful processing of your personal data.
You may exercise these rights by submitting a request to us in accordance with KVKK and the procedures determined by the Personal Data Protection Authority (KVKK Kurumu).
6. Data Security and Retention
We take appropriate technical and organisational measures to:
- Prevent unlawful processing and access to personal data,
- Ensure the safe storage and integrity of personal data.
These measures include, among others:
- Access control and authorisation mechanisms,
- Encryption and other security technologies,
- Staff training and awareness activities,
- Internal and, where necessary, external audits,
- Backup, business continuity and disaster recovery procedures.
We retain personal data for the periods required by applicable law and for as long as necessary for the purposes described above. When the relevant retention period expires or the purpose of processing no longer exists, we will delete, destroy or anonymise your personal data in accordance with KVKK.
7. Contact and Applications
To exercise your rights under KVKK or obtain further information about how we process personal data in Türkiye, you may contact us at:
Investhub Yazılım ve Teknoloji Hizmetleri A.Ş.
(Investvio brand)
Esentepe Mah. Büyükdere Cad. Levent 199 No: 199, Inside Door:6 Şişli/ İstanbul
[email protected]
Your applications will be evaluated and concluded within the time limits prescribed by KVKK and related regulations. You also have the right to lodge a complaint with the Personal Data Protection Authority in Türkiye, without prejudice to any other legal remedies.