Privacy Notice (KVKK)
This Privacy Notice has been prepared to inform you about the processing of your personal data under the Turkish Personal Data Protection Law (Law No. 6698, “KVKK”) in connection with the services provided via the platform at https://halalvestapp.com (“Platform”).
1) Data Controller
Your personal data is processed by Halalvest Yatırım Platformu A.Ş. as the data controller.
Contact: You may submit your requests under the KVKK via email to [email protected]. (Where a physical address is not required for the relevant processes, requests are received and answered via email.)
2) Personal Data Processed and Collection Methods
Depending on your use of the Platform, your personal data may be collected automatically or semi-automatically through registration/account forms, account settings, cookies and similar online technologies, platform logs, support requests and email communications.
Examples of data categories that may be processed:
- Identity/Contact: Name, surname, email, phone (if provided).
- Account & Preferences: Membership details, user preferences/settings.
- Security: IP address, device data, session/transaction logs, security records.
- Usage: Pages visited, clicks, error/performance data.
- Support Records: Request/complaint content and correspondence.
- Financial (if any): Billing/payment data (where necessary and limited to scope).
- Ads/Measurement (with consent): Cookie identifiers, ad interaction data, campaign source data.
3) Purposes of Processing
- Providing Platform services and managing contractual processes,
- Membership and account management (registration, login, authorisation, storing preferences),
- Information security, preventing abuse and fraud,
- Technical support, communications and user request management,
- Service improvement, debugging, performance and usability analytics,
- Legal compliance and responding to competent authority requests,
- Marketing, advertising and measurement (Google Ads conversion tracking, remarketing, etc.) — only with your explicit consent.
4) Legal Bases
Your personal data may be processed based on the legal bases set forth in Articles 5 and 6 of the KVKK, including:
- Necessity for the establishment or performance of a contract,
- Compliance with legal obligations,
- Establishment, exercise or protection of a right,
- Legitimate interests (provided your fundamental rights are not harmed),
- Explicit consent (especially for analytics/marketing cookies, Google Ads measurement and remarketing).
5) Data Transfers (Recipient Groups)
Your personal data may be transferred, limited to the purposes of processing and with appropriate safeguards, to:
- Service Providers: Hosting/infrastructure, email/SMS, customer support, analytics, security and similar vendors.
- Ads & Measurement Providers (with consent): Google LLC and/or its partners.
- Public Authorities: When required by law.
6) Cross-Border Transfers
Some service providers (e.g., Google) may be located abroad. In analytics/ads/measurement activities (with your consent), your data may be transferred outside Türkiye. Cross-border transfers are carried out in line with Article 9 of the KVKK with appropriate safeguards and/or your explicit consent.
7) Retention
Personal data is stored for as long as required by the purposes of processing and applicable legal retention periods. After the retention period, it is deleted, destroyed or anonymised in accordance with the KVKK.
8) Data Security
We apply reasonable technical and organisational measures such as access control, authorisation, logging, encryption/masking, network security and monitoring to protect personal data.
9) Your Rights
Under Article 11 of the KVKK, you have rights such as learning whether your data is processed, requesting information, learning purposes, knowing third-party recipients, requesting correction, deletion/destruction, objecting and seeking compensation for damages.
10) How to Submit a Request
You may email your request to [email protected]. Requests are generally responded to within 30 days under Article 13 of the KVKK. We may request identity verification depending on the nature of the request.