Last updated: August 22, 2026
As the data controller under the Personal Data Protection Law No. 6698 ("KVKK"), Penyu Teknoloji A.Ş. wishes to inform you about the processing of your personal data.
Penyu Teknoloji A.Ş. - as a company operating in Turkey, we are the data controller under KVKK. Contact: kvkk@penyu.io
Identity information (first name, last name), contact information (email, phone), financial information (payment confirmation records - card number is not stored), and usage data (search history, booking information, device information) are processed.
Your personal data is processed for the purposes of service delivery and management, contract performance, identity verification and security, fulfillment of legal obligations, customer support and communication, and service development.
Your personal data is processed under KVKK Article 5 on the legal bases of the establishment and performance of the contract, fulfillment of legal obligations, protection of our legitimate interests, and your explicit consent (for marketing communications).
Your personal data may be shared with the payment processor Stripe (USA), server infrastructure providers, and, where mandatory, authorized public authorities, within the framework of the safeguards required by KVKK.
Under KVKK Article 11, you have the right to: learn whether your personal data is being processed, request information if it has been processed, learn the purpose of processing, learn about domestic/international transfers, request correction of incomplete/inaccurate data, request its deletion or destruction, object to processing, and request compensation for damages.
To exercise your rights, you can apply in writing to kvkk@penyu.io. Your requests will be answered within 30 days at the latest. Applications are free of charge.
If you have questions about this policy, you can reach us at destek@penyu.io .
