Hatıra Deposu ("Company" or "we") is committed to protecting the privacy and security of our users' personal data. This Personal Data Protection Policy ("Policy") explains how personal data collected through the www.hatiradeposu.com website and affiliated digital platforms is processed, stored, transferred, and protected within the scope of the Law on the Protection of Personal Data No. 6698 (KVKK) and relevant legislation.
1 Purpose and Scope
This policy regulates the processing of personal data of users, customers, business partners, and all other relevant natural persons. Hatıra Deposu takes technical and administrative measures to ensure data security and processes personal data only for specific, explicit, and legitimate purposes.
2 Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
- Fulfillment of Legal Obligations
- Hizmet Sunumu: Creating albums, uploading content, and presenting them to invitation owners
- User Experience and Performance: Personalization, analysis, and system improvement
- Marketing and Promotion: Campaign and service announcements if consent is given
- Customer Service: Providing support, responding to requests, measuring satisfaction
- Internal Reporting: Strategic and operational analysis studies
3 Principles of Processing Personal Data
Hatıra Deposu processes personal data in accordance with the following basic principles:
- Compliance with Law and Good Faith
- Processing for Specific, Explicit, and Legitimate Purposes
- Data Minimization and Limitation
- Accuracy and Timeliness
- Retention for the Required Period
- Confidentiality and Security
4 Measures for the Protection of Personal Data
4.1 Technical Measures
- Data encryption (e.g., HTTPS, secure key management on the Cloud Storage side)
- Access controls and user authorization
- Firewall and log tracking
- Periodic backup and system security tests
4.2 Administrative Measures
- KVKK training and awareness for employees
- Documentation of access policies
- Data protection commitments with service providers
- Definition of internal audit and data processing procedures
5 Transfer of Personal Data
Data is shared with third parties only in the following cases:
• Legal Requirement:
Requests from courts and official institutions
• Service Providers:
- sunucumweb.com (hosting and content storage)
- Google Cloud Storage (backup of photo, video, and audio content)
- Google Analytics, PayTr, Iyzico, Tosla, RevenueCat, App Store / Google Play (for service sustainability)
Sharing is done only with mandatory data and for limited purposes. Data transfer abroad is carried out in accordance with Article 9 of the KVKK and relevant legislation.
6 Retention Period of Personal Data
Data is stored only for the period necessary depending on the purpose of processing. When the period expires, data is deleted, destroyed, or anonymized.
- Album content (photo, video, audio): Stored for 3 months by default.
- Deletion request: The user can request the deletion of their content at any time.
7 User Rights (KVKK Article 11)
Kullanıcılar aşağıdaki haklara sahiptir:
- Kişisel verilerine erişme
- Eksik veya yanlış verilerin düzeltilmesini isteme
- İşlenme amaçlarının ortadan kalkması halinde verilerin silinmesini talep etme
- İşlemeye itiraz etme
To exercise these rights, a written application can be made to bilgi@hatiradeposu.com. Requests are finalized within 30 days at the latest.
8 Politika Güncellemeleri
This policy is regularly reviewed according to legislative changes and service processes. Updates are published on www.hatiradeposu.com and become effective as of the date of publication.
9 Contact
For your questions and requests regarding the protection of your personal data, you can contact us using the information below: