OtoPulsOtoPuls

KVKK Disclosure Text

Last Updated: December 4, 2025

Data Controller: Melike Altın
Contact: otopuls@gmail.com
Website: https://otopuls.eznunc.com

1. About the Data Controller

In accordance with Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Melike Altın.

2. Processed Personal Data

OtoPuls allows users to access basic features without registration (guest mode). Users can browse mechanics and view details without creating an account. Registration is only required for account-based features such as adding reviews, likes, or making appointments.

Personal data processed by OtoPuls is collected in the following categories:

  • Identity Information: Name, surname, email address (required for registration), phone number (optional), address, city, district
  • Vehicle Information: Vehicle brand, model, year, fuel type
  • Professional Information: Specialty areas, service brands served, mechanic name, workshop name, working hours, website addresses
  • Media and Social: Profile photo, mechanic/workshop logo photo, social media accounts
  • Technical Data: Session tokens, authentication data, device information, IP address (for security and session management purposes)

3. Processing Purposes

  • User membership and profile management
  • OtoPuls service matching processes
  • Ensuring security and service quality
  • Fulfillment of legal obligations

4. Data Collection Method and Legal Basis

Personal data is collected electronically through user registration forms. The processing of data is based on the following legal grounds under KVKK Article 5/2:

  • Explicit Consent (KVKK Art. 5/2-a): Processing of personal data for which users have given consent during registration
  • Establishment or Performance of Contract (KVKK Art. 5/2-c): Processing of data necessary for the provision of OtoPuls services
  • Fulfillment of Legal Obligation (KVKK Art. 5/2-e): Processing of data necessary for the fulfillment of tax, accounting, and other legal obligations
  • Legitimate Interest (KVKK Art. 5/2-f): Processing of technical data necessary for platform security, service quality, and improvement of user experience

5. Data Transfer

Personal data is stored in Hetzner data centers located in Germany. This data transfer is conducted in compliance with KVKK Article 9 and GDPR (General Data Protection Regulation). Hetzner is a GDPR compliant data processor and provides adequate security measures.

Cross-border transfer under KVKK: Your personal data are processed and stored in Hetzner data centers in Germany. Cross-border transfers are carried out pursuant to Article 9 of the KVKK based on [your explicit consent / applicable exemptions] and by implementing the necessary administrative and technical measures.

Data Security Measures:

  • Encrypted data transmission (HTTPS/TLS protocols)
  • Secure session-based authentication
  • Access control and authentication mechanisms
  • Regular security updates and monitoring
  • Backup and recovery procedures
  • Server-level security measures provided by Hetzner

Sharing with Third Parties: Currently, personal data is not shared with third parties. If data sharing becomes necessary in the future (e.g., for service improvements, partnerships, or analytics purposes), users will be notified through this Privacy Policy or in-app notifications. Future data sharing will only occur with explicit user consent in accordance with KVKK Article 5/2 and GDPR requirements, or where legally required. Users have the right to withdraw their consent for data sharing at any time.

6. Retention Period

Personal data is retained as long as the user account is active. Upon account deletion, personal data is permanently removed from the system, except where legal retention obligations require data to be kept for a specific period (e.g., tax, accounting, or legal dispute requirements).

7. Cookies and Technical Data

OtoPuls uses session-based authentication for secure user access. Technical data such as session tokens, authentication cookies, device information, and IP addresses are collected and processed solely for authentication, security, and service provision purposes. These technical data are essential for maintaining user sessions and ensuring platform security.

8. User Rights

Users have the following rights under KVKK Article 11:

  • Learn whether their personal data is being processed
  • Request information if their data has been processed
  • Learn the purpose of processing and whether data is used in accordance with its purpose
  • Know the third parties to whom data has been transferred within or outside the country
  • Request correction if data is incomplete or incorrectly processed
  • Request deletion or destruction of data in accordance with KVKK Article 7
  • Object to any result that is to their detriment by means of analysis of processed data exclusively through automated systems
  • Request compensation for damages in case of loss due to unlawful processing of data

You can submit your requests within the scope of KVKK by sending an email to otopuls@gmail.com.

9. Technical Infrastructure

OtoPuls is developed using modern technologies including React Native, Expo framework, and TypeScript. The application is designed for both iOS and Android platforms through Expo's cross-platform development capabilities. All data processing and storage operations comply with GDPR standards.

10. User Consent

During user registration, users are required to explicitly consent to the following by checking the respective checkboxes:

  • Terms of Use Agreement
  • Privacy Policy
  • KVKK Disclosure Text

Users cannot complete registration without providing these consents. Consent can be withdrawn at any time by contacting us or deleting the account.

← Back to Home