Payfoni: GDPR Privacy Notice & Data Security

Effective Date: 01.06.2025

This Privacy Notice has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) to explain the purposes for which your personal data is processed by Payfoni, with whom it is shared, how it is protected, and your rights regarding this data.

1. Data Controller Your personal data is processed by Payfoni, in the capacity of data controller, within the scope of the KVKK.

2. Personal Data Processed

Identity Data: (Name, surname, T.R. identity number, etc.)
Contact Data: (Phone number, e-mail address, physical address, etc.)
User Account Information
Transaction Security and Usage Data
Request/Complaint Data

3. Purposes of Processing Personal Data

To provide and improve our services
To execute membership and user transactions
To fulfill legal obligations
To ensure system security
To manage requests and complaints

4. Transfer of Personal Data Your personal data may be shared with the following parties in accordance with Articles 8 and 9 of the KVKK:

Authorized public institutions and organizations
Our business partners and service providers (cloud services, technical support firms, etc.)
Courts and relevant regulatory bodies, as required by legal obligations

5. Method and Legal Grounds for Collection Your data is collected through channels such as our website, mobile application, call center, and e-mail, based on legal grounds including the fulfillment of a contract, legitimate interests, and legal requirements.

6. Your Rights Under the KVKK In accordance with Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is being processed.
To request information regarding processed data.
To learn the purpose of processing and whether it is used in accordance with that purpose.
To know the third parties, domestic or international, to whom your data is transferred.
To request correction of incomplete or inaccurate data.
To request the deletion or destruction of data processed in violation of the KVKK.
To request that the aforementioned actions be notified to third parties to whom the data was transferred.
To object to the results of any analysis performed exclusively through automated systems that may be to your detriment.
To demand compensation for damages incurred due to unlawful processing of data.

7. Method of Application You may submit your requests regarding your rights mentioned above by sending an e-mail to [email protected] or by sending a written request to our official address.

8. Contact Information