KVKK Disclosure

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by {{Sirket unvani}} ("denetlen") as data controller.

Address: {{Adres}} · Email: kvkk@denetlen.com

The Turkish version of this notice is the legally authoritative text.

2. Data we process

Depending on how you use the service, we process:

• Identity data: full name.
• Contact data: email address, mobile number (only for managers who receive SMS alerts).
• Account data: username, password hash (bcrypt, irreversible), Google profile picture.
• Security data: sign-in timestamps, IP address, browser user agent.
• Usage data: submitted inspection forms, answers, explanations and uploaded photos.

3. Purposes

We process personal data to:

• Create accounts, authenticate and authorise users.
• Operate and report on hotel inspection and hygiene processes.
• Send scheduled reminder emails and result SMS notifications.
• Keep the service secure and detect misuse.
• Meet our legal obligations.

4. Legal basis

Processing relies on performance of a contract, compliance with legal obligations and legitimate interest under KVKK art. 5/2, and on your explicit consent under art. 5/1 where required. Consent given at sign-up can be withdrawn at any time.

5. Transfers

Your data is not transferred abroad; all data is hosted on servers located in Türkiye. Data is shared only with service providers strictly necessary to deliver the service (SMS provider, email infrastructure, hosting provider) and with competent public authorities on lawful request.

A hotel’s inspection data is visible only to that hotel’s authorised users. Data is never shared between hotels.

6. Retention

Data is retained while your account is active and for statutory limitation periods. On deletion request, data not subject to a legal retention obligation is permanently erased within a reasonable period.

7. Your rights

Under KVKK art. 11 you may:

• Learn whether your data is processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction.
• Object to results derived solely from automated analysis.
• Claim compensation for damage caused by unlawful processing.

8. Contact

Send requests to kvkk@denetlen.com. We respond within 30 days at the latest.