As Bitig, acting in the capacity of the Data Controller, we hereby inform you about our procedures for processing and safeguarding your personal data in strict compliance with the Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").
1. Processed Personal Data and Purposes of Processing
In accordance with data minimization principles, only the following strictly necessary data categories are processed:
- Identity and Contact Data: E-mail address and irreversibly hashed passwords (exclusively for user authentication, account security, and critical communication).
- Customer Transaction Data: Subscription tier, billing, and payment status (processed securely via the licensed payment gateway, Creem, without storing card details).
- Usage Data: Designated social media profile information for backup execution, and technical access logs for maintaining system integrity and security.
2. Legal Basis and Method of Collection
Your personal data is collected via automated means (through user interactions on our digital platform). The legal grounds for processing are primarily based on KVKK Article 5/2-c (Establishment or execution of a contract) and KVKK Article 5/2-f (Legitimate interests of the data controller, provided fundamental rights and freedoms are not harmed).
3. Data Transfer and Zero-Retention upon Deletion
Transfers are strictly limited to essential service providers (such as cloud infrastructure providers and the BRSA-licensed payment institution, Creem) required for technical execution, and to authorized public institutions if legally compelled. Under no circumstances is your data transferred for commercial enrichment. Upon account deletion, all data is permanently purged (hard-deleted) from both our systems and any intermediary infrastructures.
4. Your Rights as the Data Subject
Pursuant to Article 11 of the KVKK and relevant GDPR provisions, you possess the right to inquire whether your data is being processed, verify its lawful use, request corrections, and exercise your "Right to be Forgotten" (request permanent deletion). All formal requests can be directed to our data protection officer via infobitig@gmail.com.