KVKK Privacy Notice

This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to representatives and team members of companies that use kervea.ai or apply to Kervea, and to people listed in the Kervea directory.

Data controller

KERVEA. E-mail: info@kervea.ai

Personal data we process

• Identity and contact: name, job title, business e-mail, business phone.
• Data contained in company verification documents: trade registry records, tax certificate, account holder and IBAN on the bank document.
• Account and security: password hash (the password itself is not stored), session and sign-in records (IP address, browser information), consent records.
• Platform use: messages between companies, records of revealed contact details, which member viewed a company’s contact details and when, orders and payment results. Card details never reach Kervea and are not stored by Kervea.
• Directory: name, job title, company, business e-mail and business phone of decision makers, and the source of this information.

Purposes and legal grounds

• Reviewing the membership application and verifying the company: establishing and performing the contract (KVKK Art. 5/2-c), legitimate interest (Art. 5/2-f).
• Showing the company profile and, where permitted, the representative’s contact details to other verified members: performance of the contract and explicit consent.
• Account security, preventing account sharing and misuse (including review of sign-in records and network information) and handling complaints: legitimate interest and legal obligation (Art. 5/2-ç, f).
• Recording orders and payments: legal obligation and performance of the contract.
• Directory: legitimate interest in enabling business contact; only business contact details with a recorded source are added.

Transfers

By the nature of the service, company profiles are shown to members outside Türkiye; this transfer is based on explicit consent (KVKK Art. 9). Payments are taken through iyzico, a licensed payment institution, and the data needed for the payment is shared with iyzico. Card details are not stored by Kervea; during payment they are passed over an encrypted connection to iyzico only. Data may also be shared with providers of hosting, e-mail delivery and backup services to the extent needed for the service, and with public authorities where legally required. Data is not sold.

How data is collected

Data is collected electronically through forms on kervea.ai, uploaded documents and use of the platform. Directory data is collected from the person directly or from public corporate sources, and the source is recorded.

Retention

Data is kept for the duration of membership and afterwards for the periods required by applicable law, then deleted, destroyed or anonymised.

Your rights

Under KVKK Art. 11 you may ask whether your data is processed, request information about it and its purpose, learn to whom it was transferred, request correction or deletion and notification of these to recipients, object to results of automated analysis, and claim compensation for damage caused by unlawful processing.

Send requests through the KVKK request form or to info@kervea.ai. Requests are answered within 30 days at the latest.