KVKK Privacy Notice
This notice explains, pursuant to Article 10 of KVKK (Turkish Personal Data Protection Law No. 6698, Kişisel Verilerin Korunması Kanunu), for what purposes, on what legal grounds and how we process your personal data.
Data controller
Divara Teknoloji ve Yazılım A.Ş.
Çaydaçıra Mah. Prof. Dr. Nuri Orhan Bul. No: 9 İç Kapı No: 221, Fırat Teknokent, Merkez / Elazığ
MERSİS (Central Registration System) no: 0301129711600001
Tax office and tax ID (VKN): Hazar Vergi Dairesi, 3011297116
KEP (registered electronic mail): divarateknolojiveyazilim@hs01.kep.tr
Email: info@divara.com.tr · Phone: +90 551 705 55 50
Who this notice covers
- visitors to tekpilot.ai and applicants to the early access list;
- customer users who hold a TekPilot account, and billing contacts.
Individuals whose data is in our customers' mailboxes are not covered by this notice. When a customer connects its own mailbox to TekPilot, the customer is the data controller for the personal data in those emails; we act solely as a data processor processing that data on the customer's instructions (see the Privacy Policy). Such individuals should submit their requests to the customer concerned; we forward any requests that reach us to that customer without delay.
Data we process, purposes and legal grounds
| Whose | What data | Purpose | Legal ground | Retention period |
|---|---|---|---|---|
| Site visitor | IP address, browser information, time of request | To serve the site securely and to prevent bots and abuse | KVKK Art. 5/2-f (legitimate interest) | The hosting provider's security log retention period; we do not otherwise keep visitor profiles |
| Early access applicant | Name, company, email, industry, message | To respond to your application and to introduce the product to you | KVKK Art. 5/2-c (establishment of a contract); for promotional emails, the separate consent you give under Law No. 6563 (Law on the Regulation of Electronic Commerce) | 2 years from the application, or until you request deletion |
| Account user | Name, email, role, password hash, two-factor authentication secret (encrypted), session and activity logs, IP address | To provide the service, to protect the account and to record who did what and when | KVKK Art. 5/2-c (performance of a contract), Art. 5/2-f (security) | For the life of the account; activity logs for 2 years after the contract ends |
| Billing contact | Trade name or full name, tax ID (VKN) or Turkish ID number (TCKN), tax office, address, invoice and payment records | Invoicing and tax obligations | KVKK Art. 5/2-ç (legal obligation), Art. 5/2-c | 10 years (Tax Procedure Law No. 213 (VUK) Art. 253, Turkish Commercial Code No. 6102 (TTK) Art. 82) |
You enter your card details on the secure page of the payment institution iyzico; they never reach us.
Method of collection
We collect data through the forms on the site and in the application, from the records created while you use your account, and by automated means for security purposes.
To whom we transfer data
- Within Türkiye: iyzico for payments, our e-invoice integrator for e-invoicing, and competent public authorities where required by law.
- Abroad: the service providers established outside Türkiye that are listed on the Sub-processors page. These transfers rely on one of the appropriate safeguards in KVKK Art. 9: the standard contract under KVKK Art. 9/4; each contract is notified to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) within five business days of its signature.
Your rights
Under KVKK Art. 11, you have the right to:
- learn whether your personal data is processed and, if it is, request information about it;
- learn the purpose of the processing and whether the data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom it is transferred;
- request its rectification if it is incomplete or inaccurately processed;
- request its erasure or destruction within the conditions set out in KVKK Art. 7;
- request that rectification, erasure and destruction be notified to the third parties to whom it was transferred;
- object to an outcome against you that results from analysis by automated systems;
- claim compensation if you suffer damage because of unlawful processing.
How to apply
You may submit your request, in accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ), in writing to the address above, to our KEP address, or by email from the email address registered in our systems to info@divara.com.tr. We conclude your request free of charge within 30 days at the latest; if the action involves an additional cost, the fee schedule set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) may apply.