Information notice under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Under the Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by Onur Sercan Yılmaz (urlreview.com and the urlreview mobile apps) as data controller, as described below. Contact: destek@urlreview.com
2. Categories of personal data
- Identity: name / display name, username.
- Contact: email address (provided by Google or Apple).
- Visual: profile picture (provided by Google or Apple, or uploaded by you) and header photo.
- Customer transactions: ratings, reviews, replies, likes, follows, bookmarks, reports and blocks.
- Transaction security: IP address, session data, sign-in records, device and browser details, moderation records, app error reports.
- Device and notifications: push token, device type and notification preferences.
- Preferences: language, theme and country.
We do not ask for special categories of personal data; please do not include such data in your reviews.
3. Purposes
- Managing membership and providing the Service,
- Publishing content, personalising the feed and showing country trends,
- Enforcing the Community Guidelines and preventing unlawful content and abuse,
- Information security and fixing app errors,
- Sending push notifications if you allow them,
- Meeting legal obligations, in particular under Law No. 5651, and informing competent authorities,
- Responding to requests and complaints.
4. Legal grounds
Your data is processed on the following grounds of KVKK Article 5(2):
- (c) necessary for entering into and performing the Terms of Service,
- (ç) necessary to comply with legal obligations (e.g. Law No. 5651),
- (e) necessary to establish, exercise or protect a right,
- (f) necessary for our legitimate interests without harming your fundamental rights (e.g. spam and abuse prevention, security).
Your public profile and reviews are data made public by you under ground (d).
5. Method of collection
Data is collected electronically, by automated or partly automated means, through the website, the mobile apps, cookies and server logs when you sign in with Google or Apple, set up your profile and use the Service.
6. Transfers
Your data may be transferred to the hosting, database, authentication and moderation providers used to run the Service (Supabase, Vercel, Google, Apple, Expo; for push notifications the Expo push service, Apple Push Notification service and Firebase Cloud Messaging; and, if enabled, Anthropic and Google Safe Browsing) and, upon request, to competent public authorities.
Because these providers' servers may be located abroad, your data may be transferred outside Türkiye in accordance with KVKK Article 9 (standard contractual clauses and other appropriate safeguards).
7. Retention
Data is kept for as long as required for the purposes above and by law. After you delete your account it is deleted or anonymised within 30 days; traffic data required by Law No. 5651 is destroyed after the legally required period.
8. Your rights under KVKK Article 11
You have the right to learn whether your data is processed and request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties in Türkiye or abroad to whom it is transferred, to request correction of incomplete or incorrect data, to request deletion or destruction under KVKK Article 7, to request that these actions be notified to recipients, to object to a result against you arising exclusively from automated analysis, and to claim compensation for damages caused by unlawful processing.
9. How to apply
Send your request to destek@urlreview.com from the email address registered in your account, with information identifying you, in line with the Communiqué on the Procedures and Principles of Applications to the Data Controller. Requests are answered free of charge within 30 days. If your request is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board.