This English notice explains how Shortmox Agency, acting as data controller, processes personal data under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
The purpose of KVKK is to protect the fundamental rights and freedoms of persons, especially the right to privacy, in the processing of personal data, and to regulate the obligations and procedures binding on natural and legal persons who process personal data.
1. Controller identity
Controller: Shortmox Agency. Address: [Postal Address], Istanbul, Turkey. Email: info@shortmox.com.
2. Categories of personal data processed
Depending on your interaction with the platform, we may process identity and contact information, user account information, transaction security data, usage and log data, support and communication records, suggestion-form contents, rights or takedown request information, and technical access data.
3. Purposes of processing
Your personal data may be processed for account creation and management, authentication and session security, operation of user-specific saved state, support, contact, and submission handling, rights and takedown evaluation, platform security and abuse prevention, service improvement and technical diagnostics, compliance with legal obligations, and the establishment, exercise, or protection of legal rights.
4. Legal grounds
Your personal data may be processed on one or more of the legal grounds set out in Articles 5 and 6 of the Law, including where explicitly permitted by law, where necessary for contract performance, where necessary for the data controller’s legal obligations, where necessary for the establishment, exercise, or protection of a right, where necessary for the controller’s legitimate interests provided fundamental rights are not harmed, and where explicit consent is required and obtained.
5. Collection methods
Data may be collected electronically through forms, account interfaces, login and session systems, cookies and similar technologies, communications, log records, and embedded service interactions where relevant.
6. Transfers
Your personal data may be transferred, to the extent necessary and lawful, to service providers, infrastructure providers, communication systems, legal and technical advisers, competent public authorities, and other recipients where legally required or necessary for rights protection.
7. Rights of the data subject
Under Article 11 of the Law, you may request to learn whether your personal data is processed, request information if processed, learn the purpose and whether processing is in line with that purpose, know third parties to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction where conditions are met, request notification of correction or deletion to third parties, object to adverse outcomes arising exclusively from automated analysis, and seek compensation if you suffer damage due to unlawful processing.
8. Application method
You may submit your KVKK requests through: [Email / KEP / postal application route]. Applications are evaluated within statutory periods and procedures.