Personal Data Protection Notice (KVKK)
This notice is provided under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to explain how personal data are processed through the kentbilgisistemi.com website and the “Kent Bilgi Sistemi” mobile application (together, the “Platform”).
1. Data controller
The data controller is Gazioğlu Yazılım A.Ş. (the “Company”).
- Address: Kışla Mah. 37 Sok. Cengizhan Apt. 6 102 Muratpaşa / Antalya, Türkiye
- MERSIS No: 0389184645100001
- E-mail: info@kentbilgisistemi.com
- Registered e-mail (KEP): gazioglu.yazilim@hs01.kep.tr
2. Categories of personal data
| Category | Examples | Data subjects |
|---|---|---|
| Identity | Name, surname, username | Members |
| Contact | E-mail address, phone number (optional) | Members, contact form users |
| User content and transactions | Places you add, comments and ratings, favourites, follows, messages, notification history | Members |
| Visual | Profile photo, photos of places you upload | Members |
| Transaction security | IP address, access and session logs, browser and device information, irreversible password hash | All visitors and members |
| Location | Your device location if you grant permission (to show nearby places); the location of a place you add | App and website users |
| Device and notifications | Push notification token, operating system and app version, advertising ID if you allow it | Mobile app users |
| Marketing and usage | Usage data collected through analytics and advertising cookies / SDKs, only with your consent | Visitors and app users |
| Requests and complaints | Applications, complaints and correspondence | Anyone who contacts us |
We do not request special categories of personal data listed in Article 6 of the KVKK. Please do not share such data (health, religion, political opinion, etc.) in comments, messages or place descriptions.
3. Purposes of processing
- Creating your membership, authentication (e-mail, Sign in with Google, Sign in with Apple) and account management,
- Providing the Platform services: city guide, adding and managing places, favourites, messaging, notifications, news and content,
- Receiving and answering contact requests, suggestions and complaints,
- Information security, preventing abuse and unlawful content,
- Fulfilling hosting provider obligations under Law No. 5651 and responding to requests from competent authorities,
- Measuring and improving the service (analytics), with your consent,
- Showing and measuring advertisements; personalised advertising with your consent,
- Establishing, exercising and defending legal claims.
4. Legal grounds
| Legal ground (KVKK Art. 5) | Processing |
|---|---|
| Expressly provided by law (Art. 5/2-a) | Retention of access logs under Law No. 5651 and its regulation |
| Necessary for the conclusion or performance of a contract (Art. 5/2-c) | Membership, sign-in, adding places, messaging, notifications and other Platform services |
| Compliance with a legal obligation (Art. 5/2-ç) | Responding to competent authorities and to KVKK applications |
| Establishment, exercise or protection of a right (Art. 5/2-e) | Disputes and complaints |
| Legitimate interest (Art. 5/2-f) | Information security, abuse prevention, keeping core functions running (without harming your fundamental rights and freedoms) |
| Explicit consent (Art. 5/1) | Analytics and advertising cookies / SDKs, personalised ads, use of the advertising ID in the mobile app and transfers abroad based on explicit consent |
Location data are processed only when you grant location permission on your device and only to provide the related service (nearby places, place location). You can withdraw the permission at any time in your device settings.
5. Method of collection
Personal data are collected electronically, by partly or fully automated means, through the Platform’s sign-up, sign-in and contact forms, place submission screens, mobile app permissions, cookies and similar technologies and the software development kits (SDKs) of third-party service providers.
6. Transfers
Within Türkiye: to our hosting and e-mail infrastructure providers, legal advisers and, upon request, competent public authorities and courts, limited to the purposes above.
Abroad: the servers of the following services used on the Platform are located outside Türkiye, including the European Union and the United States:
- Google LLC / Google Ireland Ltd. — Firebase (push notifications, authentication, Firebase Analytics), Sign in with Google, Google Analytics 4, Google AdSense (web) and Google AdMob (mobile) advertising, Google User Messaging Platform (UMP),
- Apple Inc. — Sign in with Apple and iOS notification services,
- Huawei — push notifications (Push Kit) in the AppGallery version.
Transfers abroad are made in accordance with Article 9 of the KVKK: on the basis of an adequacy decision where one exists, otherwise by providing appropriate safeguards such as the standard contracts announced by the Personal Data Protection Board, and, in incidental cases where these are not possible, on the basis of your explicit consent. Analytics and advertising cookies and SDKs run only with your consent.
7. Retention periods
- Membership and account data: for the duration of your membership; deleted or anonymised within 30 days after your account is deleted (statutory retention obligations reserved).
- Access and traffic logs: for the period required by Law No. 5651 and related legislation (minimum 1, maximum 2 years).
- Contact and application correspondence: 2 years after closure.
- Cookie consent record: 6 months; other cookies as described in the Cookie Policy.
- Data related to a dispute: for the statutory limitation periods.
When the period expires, data are erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
8. Your rights under Article 11 of the KVKK
By applying to the data controller, you have the right to:
- learn whether your personal data are processed,
- request information if they have been processed,
- learn the purpose of processing and whether data are used in line with that purpose,
- know the third parties to whom data are transferred in Türkiye or abroad,
- request rectification of incomplete or inaccurate data,
- request erasure or destruction under the conditions of Article 7 of the KVKK,
- request that the operations under (e) and (f) be notified to third parties to whom the data were transferred,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation for damages arising from unlawful processing.
You can withdraw any consent at any time (via the “Cookie settings” link in the site footer, the privacy settings in the app, or the application method below).
9. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your request:
- by e-mail from the address registered on the Platform to info@kentbilgisistemi.com with the subject “KVKK Application”,
- by a signed letter delivered in person or via a notary to our address above,
- by registered e-mail (KEP), secure electronic signature or mobile signature.
Your application should include your name and surname, your T.R. identity number if you are a Turkish citizen (otherwise your nationality and passport/ID number), your address or e-mail for notifications and the subject of your request. Applications are answered free of charge within 30 days at the latest; if the action requires an additional cost, the fee in the tariff set by the Board may be charged. If your application is rejected, the answer is insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board under Article 14 of the KVKK.
See also our Privacy Policy, Cookie Policy and Account and Data Deletion pages.
Last updated: 17.10.2026