KVKK Disclosure
Personal Data Information Notice (KVKK)
Last updated: July 16, 2026
This information notice is prepared to inform individuals whose personal data is processed within the scope of the Sintel website and platform, in accordance with the Personal Data Protection Law No. 6698 (“KVKK”).
Data controller
The data controller is SİNTEL BİLGİ VE İLETİŞİM SİSTEMLERİ ANONİM ŞİRKETİ.
- MERSIS No: 0381043112700011
- Tax No: 3810431127
- Trade Registry Directorate / Registry No: Istanbul Trade Registry Directorate / 503570-0
- Address: Güzeltepe Mah. Zübeyde Hanım Cad. No: 23 İç Kapı No: 1 Üsküdar / İstanbul
- Email: info@sintel.com.tr
Categories of processed personal data
The following data categories may be processed depending on the service provided by Sintel and the feature used:
- Identity and contact information: Full name, email address, phone number, and contact form content.
- Account, authorization, and organization information: User account, user-organization membership, role, authorization, account status, language preference, and profile image.
- Authentication and session information: Password hash, email verification status, session token hash, session start/end, and last activity information; OAuth or passkey information related to the authentication method used.
- Transaction and security records: Login attempts, IP address, browser/device information, transaction, audit, and security logs.
- Support information: Support tickets, message contents, ticket participants, tasks, and file metadata (name, type, size, technical records) uploaded within the scope of support.
- Commercial relationship and service information: Records related to quotes, orders, licenses, product, or service access.
- Contact form and abuse prevention records: Name, email, phone, subject, and message shared in the contact form, along with IP address and related technical records for form security and rate limiting.
Please do not include sensitive personal data such as health information, biometric data, criminal convictions, or security measures in support tickets or attachments unless absolutely necessary.
Method of collecting personal data
Personal data may be collected entirely or partially through automated means via the website and contact form, user account creation and login processes, platform support and service screens, user-uploaded content, cookies, server logs, and security mechanisms.
Processing purposes and legal bases
Your personal data is processed for the following purposes and based on the legal grounds specified in the KVKK:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account creation, login, authorization, and session management | Provision of the platform, account management, and ensuring secure access | Art. 5/2-c of KVKK: Directly related to the establishment or execution of a contract |
| Provision of products, licenses, quotes, orders, and support services | Delivery of services, customer relationship management, and resolution of support requests | Art. 5/2-c of KVKK |
| Login attempts, IP/browser records, audit logs, and session security | Ensuring information security, preventing abuse, investigating incidents, and maintaining service continuity | Art. 5/2-f of KVKK: Necessary for the legitimate interests of the data controller |
| Fulfillment of records, retention, and authorized institution requests arising from legislation | Fulfillment of legal obligations and exercise of rights | Art. 5/2-ç of KVKK: Necessary for the data controller to fulfill a legal obligation |
| Evaluation of contact form submissions | Responding to requests, establishing communication, and ensuring form security | Art. 5/2-f of KVKK; or Art. 5/2-c of KVKK if the request relates to pre-contractual measures |
| Remembering language and other optional preferences | Personalization of user experience | Art. 5/2-f of KVKK; explicit consent for cookies or similar technologies requiring consent |
If there are processing activities based on explicit consent, the information notice and the explicit consent process are executed separately.
Storage and destruction
Personal data is stored for the duration required by the relevant processing purpose and within the framework of applicable legal retention obligations. Upon expiration, data is deleted, destroyed, or anonymized.
Session records are purged from the system upon expiration of the session duration. Retention periods for other data categories are determined by considering the continuation of the service relationship, potential dispute statute of limitations, statutory retention obligations, and information security requirements.
Security
To prevent the unlawful processing and access of personal data and to ensure data integrity, we implement access authorization, session and authentication controls, logging, technical security measures, and organizational safeguards.
Your rights under KVKK
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in compliance with that purpose, to request the correction of incomplete or inaccurate data, to request deletion or destruction within the conditions stipulated in the Law, to request notification to third parties to whom the data has been transferred, to object against the emergence of a result against you by means of analyzing the processed data automatically, and to claim compensation for any damage incurred.
You may submit your requests regarding these rights to info@sintel.com.tr along with the information and documents required to verify your identity. Requests will be concluded within the procedure and timeframes stipulated by the KVKK and relevant legislation.