Privacy Notice / Personal Data (KVKK)

Data controller / operator information

This notice is provided under Turkey's Law No. 6698 on the Protection of Personal Data ("KVKK"). KVKK is the Turkish equivalent of general personal-data-protection laws (comparable in purpose to the EU's GDPR) and applies to the processing of personal data carried out in connection with this website, which is operated from Turkey.

Personal data collected through this website is processed for the purpose of carrying out pre-registration, communication, and information activities under the EhlyTECH venture. During the pre-registration period, data processing activities are carried out on behalf of the EhlyTECH venture by Seda TURAN. Before revenue-generating activity begins, the completion of official registration and tax procedures appropriate to the business structure — under Repeated Article 20/B of the Turkish Income Tax Law, via the Digital Tax Office, in the name of Seda TURAN — is planned. This text will be updated once that process is completed. This statement does not mean that an application has already been filed or that any certificate has already been obtained.

No payments, commissions, membership fees, or paid service sales are currently taken through the website.

Contact: for data requests, kvkk@ehlytech.com · for general inquiries, info@ehlytech.com · for support, destek@ehlytech.com

Personal data processed

Through the EhlyTECH website and its forms, and in line with the current stage of the service, the following categories of personal data may be processed:

• Identity and contact: full name, phone number, email address
• Location: city, district, service regions
• Expert application information: type of work (individual/corporate), company name, main category, subcategory, services, years of experience, team size, vehicle and equipment information
• Documents and trust information: identity verification document, certificate, mastery certificate, tax registration certificate / tradesperson exemption certificate, chamber registration, professional qualification certificate, authorization / activity certificate, driver's license, SRC certificate, psychotechnical assessment, vehicle registration, transport authorization / K-certificate, traffic insurance / comprehensive insurance policy, reference / website / social media links (only if uploaded or shared by the user)
• Waitlist information: email, city, customer notification consent
• Technical data: IP address, device/browser information, security logs, cookie preferences
• Application review data: application ID, application status, program type, and evaluation notes that may be kept server-side

Purposes of processing personal data

Your personal data may be processed, on a limited basis, for the following purposes:

• Receiving, recording, and evaluating expert pre-registration applications
• Building a pool of experts by city, district, category, and service
• Contacting applicants and managing the application process
• Reviewing documents, certificates, references, and trust information (where provided / required)
• Receiving and managing customer waitlist entries
• Maintaining site security and preventing misuse and fraudulent applications
• Fulfilling legal obligations
• Sending notifications and announcements where explicit consent or a legally valid permission has been given

Method of collecting personal data

Your personal data may be collected electronically through the expert application form, the customer waitlist form, contact requests, automated technical records (logs), and cookies on the EhlyTECH website.

For certain service types, uploading specific documents may be required for security, verification, or eligibility purposes. Required document types may vary depending on the selected service. Optional documents are processed only if you choose to upload or share them.

Legal grounds

Your personal data may be processed in accordance with the conditions set out in Article 5 of KVKK, or, where you share data qualifying as a special category of personal data, in accordance with Article 6 of KVKK.

Example legal grounds:

• Necessity for the establishment or performance of a contract
• Necessity for the data controller to fulfil a legal obligation
• Necessity for the establishment, exercise, or protection of a right
• Necessity for the legitimate interests of the EhlyTECH venture, provided your fundamental rights are not harmed
• Your explicit consent (e.g. notification/communication consent, sharing of optional documents)

Parties to whom personal data may be transferred

Your personal data may be shared with the following parties for purposes related to service delivery, hosting, security, communication, and legal obligations:

Your data is not sold to third parties for marketing purposes.

• Hosting and infrastructure providers (e.g. Vercel, Google Firebase)
• Email and communication service providers (e.g. Google Workspace / email infrastructure)
• Bot protection and security tools (e.g. reCAPTCHA or similar, if used)
• Legal advisors, auditors, and authorized public authorities (where legally required)

Transfer abroad

Due to hosting, security, and cloud infrastructure, your personal data may be processed or stored on servers located outside of Turkey (e.g. cloud services located in the EU/US).

Should such a transfer occur, EhlyTECH aims to rely on transfer mechanisms compliant with the requirements set out in Article 9 of KVKK and related regulations.

Retention period

Your personal data is retained for as long as required by the purpose of processing, taking into account the statutory retention/limitation periods set out in applicable law.

Records relating to rejected or cancelled applications are deleted, destroyed, or anonymized after a reasonable period, except where operational or legal requirements dictate otherwise.

Waitlist records may be retained until the notification purpose ends or until you withdraw your consent.

Rights of the data subject

Under Article 11 of KVKK, you have the right to: learn whether your personal data is being processed; request information about it; learn whether it is used in line with its purpose; request correction if it has been processed incompletely or incorrectly; request its deletion or destruction; learn the third parties to whom it has been transferred; and object to a result that is to your detriment arising from analysis carried out solely through automated systems.

How to apply

To exercise your rights, you may send an email to kvkk@ehlytech.com. Your request should clearly identify you and clearly state what you are requesting.

Requests are concluded within 30 days at the latest, in accordance with KVKK and related legislation.

Updates

This notice may be updated as the scope of the EhlyTECH venture, the types of data collected, the start of revenue-generating activities, or developments in tax / official registration processes evolve. The current version is published on the website.