Privacy Notice (KVKK Disclosure)

Draft — to be reviewed by legal counsel before launch.

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Veri Kurdu Yazılım, Kutlubey Mah. 1002. Sk. No:14, Merkez / Isparta, Turkey (sole proprietorship).

2. How we collect your data

Directly from you, electronically, when you fill in a form on makineyurdu.com (sign-up, listing creation, messaging, reviews) or interact with the site (page views, clicks) — see §5 for analytics.

3. Categories of personal data and processing purpose

Identity and contact data (name, e-mail, phone) — creating and managing your account, letting buyers reach sellers.
Company data (optional: company name, city, address, website) — displayed on your listings if you choose to provide it.
Listing content (titles, descriptions, photos, videos, price) — publishing and operating the marketplace.
Communication data (messages between buyers and sellers, reviews you leave) — enabling the messaging and rating features you use.
Transaction security data (login timestamps, IP address, session identifiers) — account security, fraud prevention, and legal compliance.
Google account data (if you sign in with Google: e-mail and name) — authentication.

4. Legal basis

Processing is based on Articles 5/2(c) (necessity for the performance of a contract you are a party to — the membership agreement) and 5/2(f) (our legitimate interest in operating and securing the platform) of the KVKK. Where required (e.g. marketing communications), we rely on your explicit consent (Art. 5/1).

5. Cookies and analytics

We use anonymous, consent-gated usage analytics (Google Analytics) only after you accept cookies in the banner shown on your first visit. Details of what is collected and how to withdraw consent are in our Cookie Policy.

6. Sharing and international transfer

The name, phone number and company shown on a listing are visible to everyone viewing it. Listing and account data is stored on servers in Turkey. If you consent to analytics cookies, anonymised usage data is processed by Google LLC, which may involve a transfer outside Turkey under Google's standard safeguards. We do not sell personal data or share it with third parties for advertising purposes.

7. Retention period

Account data is kept while your account is active. When you delete your account, personal data is anonymised immediately; records subject to statutory retention obligations (e.g. under the Turkish Code of Obligations or e-commerce law) are kept for the legally required period, after which they are securely deleted.

8. Your rights (KVKK Art. 11)

As a data subject, you have the right to:

learn whether your personal data is being processed;
request information if it has been processed;
learn the purpose of processing and whether it is used accordingly;
know the third parties to whom your data is transferred, in Turkey or abroad;
request correction of incomplete or inaccurate data;
request deletion or destruction of your data (subject to statutory retention);
object to a result that is to your detriment arising from automated analysis;
claim compensation for damages arising from unlawful processing.

9. How to apply

Send your request to info@makineyurdu.com with a description of your request and proof of identity, or by post to the address in §1. We respond within 30 days as required by the KVKK.