Information Notice under the Turkish Data Protection Law (KVKK)
This notice has been prepared to inform you about the processing of your personal data under Law No. 6698 (“KVKK”) in connection with the services provided via the platform at https://halalvestapp.com (“Platform”).
1) Data Controller
Your personal data is processed by Halalvest Yatırım Platformu A.Ş. as the data controller.
Contact: You may submit your KVKK requests via [email protected]. (Where a physical address is not required for the relevant processes, requests are received and answered via email.)
2) How We Collect Personal Data
- Registration/account creation forms and screens,
- Platform usage and transaction logs,
- Cookies and similar online technologies (e.g., tags/pixels),
- Support requests, emails and feedback channels,
- Verifications required by legal obligations.
3) Categories of Personal Data
- Identity & Contact: Name, surname, email, phone (if provided).
- Account Data: Membership data, preferences and settings.
- Security: IP address, device data, session/transaction logs, security records.
- Usage Data: Pages visited, clicks, user journey, performance/crash data.
- Marketing/Ads Data: Cookie identifiers, ad interaction data, campaign source data (with consent).
- Support Records: Request/complaint content and correspondence.
- Financial (if any): Billing/payment data (where necessary and limited to scope).
4) Purposes of Processing
- Providing platform services and managing contractual processes,
- Membership and account management (registration, login, authorisation),
- Information security, preventing abuse and fraud,
- Technical support and user communications,
- Product/service improvement, debugging, performance and usability analytics,
- Legal compliance and responding to competent authority requests,
- Advertising/measurement (e.g., Google Ads) and remarketing (with your explicit consent).
5) Legal Bases
- Necessity for the establishment/performance of a contract,
- Compliance with legal obligations,
- Establishment, exercise or protection of a right,
- Legitimate interests (provided your fundamental rights are not harmed),
- Explicit consent (especially for analytics/marketing cookies, Google Ads measurement and remarketing).
6) Cookies, Google Ads and Similar Technologies
In addition to strictly necessary cookies, analytics and marketing cookies/tags may be used with your consent. Examples include:
- Google Ads Conversion Measurement: Measuring campaign performance and attribution/reporting.
- Google Ads Remarketing: Delivering personalised ads after visiting the Platform.
This may involve processing online identifiers such as cookie IDs, device/browser data, ad interaction events and page view/click events. These technologies operate based on your consent, and you may change your preferences at any time.
7) Data Transfers
- Service Providers: Hosting, infrastructure, email/SMS, customer support, analytics and security vendors.
- Ads/Measurement Providers (with consent): Google LLC and/or its partners.
- Public Authorities: When required by law.
8) Cross-Border Transfers
Your data may be transferred abroad in connection with advertising/measurement and certain infrastructure services (e.g., Google services). Cross-border transfers are carried out in line with Article 9 of the KVKK with appropriate safeguards and/or your explicit consent.
9) Retention
Personal data is stored for as long as required by the processing purposes and applicable legal retention periods. Afterwards, it is deleted, destroyed or anonymised.
10) Data Security
We apply reasonable technical and organisational measures (e.g., access controls, logging, encryption/masking, authorisation, monitoring and security testing) to protect personal data.
11) Your Rights (KVKK Article 11)
- To learn whether your personal data is processed,
- To request information if processed,
- To learn the purpose of processing and whether it is used accordingly,
- To know third parties to whom data is transferred domestically/abroad,
- To request correction of incomplete/incorrect data,
- To request deletion/destruction under Article 7,
- To request notification of correction/deletion to third parties,
- To object to an adverse result arising from automated processing,
- To request compensation for damages due to unlawful processing.
12) How to Submit a Request
You may send your request to [email protected]. Requests are generally responded to within 30 days as per Article 13 of the KVKK. We may ask for identity verification depending on the nature of the request.