KVKK privacy notice

The controller is the party that operates the MİTA trade desk. This version does not publish a VERBİS registration number or a physical service address. KVKK requests are filed from the account desk and closed on the admin desk.

Data processed: company name, country, email, password hash, role, email verification, listings, requests, messages, quotes, locked deals, payment records, and consent records (text version, language, time). Passwords are not stored in plain text.

Purposes: open a company account, match buyers and sellers through listings and requests, keep the quote and deal record, and close requests. No card is charged. The platform does not hold escrow funds.

Legal bases: KVKK art. 5/2-c (forming the account), art. 5/2-ç (a legal duty when one arises), and art. 5/2-f (desk security). Registration also stores explicit consent for this notice, the terms, and the trade rules. There is no marketing-message consent in this version.

Transfers: no card network or ad network is connected. Sanctions screening uses copies of the official lists on MİTA's server; company data is not sent to the list owners. FX rates are read from the public TCMB bulletin. Data stays in the application database. An admin sees the company record, the KVKK request. A buyer and a seller see only their own thread.

Rights under KVKK art. 11 include learning whether data is processed, asking for a correction, and asking for deletion. A deletion request does not by itself erase the other party's deal record. The admin desk closes the request with that limit in view.

Retention: while the account stays open. Consent records stay with the account so the accepted text version can be shown.

This text is not a legal opinion. It is the notice recorded for this demo desk.