YEREL22 · TRANSPARENCY AND TRUST
Information Text Regarding the Processing of Personal Data
We explain what information we use, for what purposes, and your rights over your personal data.
Update date: · Version 1.1
This document’s original language is Turkish.
1. Data controller and scope
This text has been prepared for local22.com visitors, members, business representatives and community participants within the scope of Article 10 of the Personal Data Protection Law No. 6698. Local22 is the name of the platform; It does not replace the legal identity of the data controller.
- Data controller
- Torenstech Medikal ArGe Ltd. Şti.
- Notification address
- The address to be verified by the operator will be added.
- Application channel
- dorukkarlikaya@tv25.app
2. Data, purposes and legal grounds
The following mapping is based on current product functions. It must be finalized by the operator together with the actual activities and obligations. Use of a service does not imply general consent to any data processing or marketing.
| Data and process | Purpose | Basis |
|---|---|---|
| Display name, email, password summary; registration, verification, login and password renewal records | Providing membership service, verifying account owner and secure access | KVKK article 5/2-c: establishment and execution of membership service |
| Business representation information, business contact information, address, description, application and team authorizations | Submit a business profile, review representation application and manage authorizations | art.5/2-c; Article 5/2-f, taking into account the rights, in order to prevent fraudulent representation and unauthorized transactions. |
| Listing, community content, publication preferences, moderation decisions | Publishing requested content, editing, investigating abuse | For the performance of the service, m.5/2-c; m.5/2-f for platform security |
| Custom date of birth, declaration time and content preference | Applying 15+ access and 18+ content filters in the community; declaration is not official age verification | For the performance of the requested service, m.5/2-c; Concrete child protection obligations are also evaluated |
| Optional birthday day/month information | Storing the user's unique profile information; no automatic celebration or marketing | M.5/2-c for requested profile function |
| Optional referral code and inviting account link | Record of the reference relationship requested by the user | M.5/2-c for the desired membership function |
| IP and technical access data, attempt limits, admin security events | Preventing attacks and unauthorized access, operating the service | Article 5/2-f, provided that it does not harm fundamental rights; If there is a concrete legal obligation, Article 5/2-ç |
| Rights applications, relevant transaction and dispute records | Responding to legal requests and protecting rights | art.5/2-ç and art.5/2-e |
If directory data received from publicly available sources contains personal data, the purpose of publicization and the rights of the data subject are evaluated. The presence of information on the internet does not constitute unlimited reuse permission. For data made public by the person himself, Article 5/2-d can only be evaluated if used compatible with the purpose of publicization.
There is no flow to upload identity documents, health data or business proof documents in this version. Do not type such information in free text fields. If document verification is enabled, additional information should be provided regarding the document type, access and storage period.
3. Collection methods
Data is collected electronically through web forms, account and panel transactions, session cookies, e-mail verification processes and technical access records. Sourced records added to the business directory are obtained from publicly available corporate sources. The accuracy and currency of the data provided by the user are evaluated during the relevant process.
4. Sharing and recipients
- Published business, listing and community areas are visible to site visitors. The login email and password digest are not displayed in the public catalogue.
- Business team members can only access the information of the business for which they are authorized; System moderators access applications and content within the scope of their duties.
- Vercel web application; Cloudflare data service and database; Resend enables the sending of transaction e-mails. These services process technical or accounting data necessary for their tasks. Emails include the recipient address, display name where necessary, and transaction content.
- Google Maps or OpenStreetMap can be loaded on the page containing the map; The provider can retrieve IP and browser/request data. The directions link leads to the external service.
- Sharing with authorized public institutions and judicial authorities can only be made according to the scope of the valid legal request.
5. Overseas services
Use of Vercel, Cloudflare, Resend and map services may require data transfer abroad. The processing countries of the providers, their sub-processors and the KVKK Article 9 transfer mechanism to be applied must be verified by the operator and added to this section. This draft does not mean that an adequacy decision has been made or that a standard contract has been signed and notified. Continuous transfer of services does not become lawful with a general “I accept” box.
6. Storage and deletion
User session 7 days; The admin session runs for a maximum of 30 minutes with a 10-minute inactivity limit. Email verification code is valid for 10 minutes, password reset link is valid for 20 minutes. Expired temporary records are removed by hourly cleaning. Admin security events in the application are retained for 90 days, and transactional email queue records are retained for a maximum of 30 days.
Detailed storage/destruction schedule for membership, content, moderation history, infrastructure logs and backups have not been finalized yet. Archiving is not permanent deletion. Date of birth and separate birthday information can be deleted by emptying and saving in the special profile form; Deleting age information closes community access. These fields are not added to public profile or sharing images. For data whose processing conditions are no longer valid, the obligation to delete, destroy or anonymize is also evaluated.
7. Your rights and application
Your rights and remedies, including learning about the processing of your personal data, requesting information, correction and deletion, if applicable. KVKK and your rights It is explained on the page. Clarification is not a request for explicit consent; If necessary, explicit consent is obtained separately for the relevant purpose.
Official source: KVKK - Disclosure Obligation