1
Identity of the Data Controller
KefStacks Technologies ("Company"), in its capacity as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"), processes your personal data within the scope explained below.
- Address:
- Cumhuriyet Teknokent – Yenisehir Kardesler St. No: 7/2 B Block, 58070 Merkez/Sivas
- Email:
- info@kefstacks.com
2
Categories of Personal Data Processed
- Identity Data: Name, surname
- Contact Data: Email address
- Customer Transaction Data: Order, payment, invoice/credit history
- Transaction Security Data: IP address, log records, session info
- Content Data: Created characters and stories
3
Purposes of Processing Personal Data
- Carrying out membership registration and management processes
- Carrying out contract processes (credit package purchase, service delivery)
- Carrying out information security processes
- Carrying out storage and archival activities (legal obligations)
- Conducting activities in compliance with legislation
- Carrying out communication activities (support, notifications)
- Carrying out activities for customer satisfaction
4
Transfer of Personal Data
Your personal data may be shared with the following parties under KVKK arts. 8 and 9:
- Payment Service Provider (iyzico): Required data is transferred to iyzico for payment processing.
- Cloud Infrastructure Providers: AWS/Azure/Google Cloud providers used for data storage.
- AI Model Providers: Providers like OpenAI/Anthropic for story generation (content anonymized).
- Authorized Public Authorities: Court/prosecutor requests in case of legal obligation.
5
Data Collection Method and Legal Basis
Personal data is collected electronically through the website and mobile application; processed based on the following legal grounds specified in KVKK art. 5:
- Mandatory for the establishment and performance of the contract
- Fulfillment of legal obligation
- Mandatory for the establishment, exercise or protection of a right
- Necessary for legitimate interests
- Explicit consent of the data subject
6
Your Rights Under KVKK Art. 11
Under Article 11 of the Law, you have the following rights:
- Learn whether your personal data is being processed
- Request information about its processing if any
- Learn the purpose and whether it is used in accordance with the purpose
- Know the third parties to whom personal data is transferred at home or abroad
- Request correction if processed incompletely or incorrectly
- Request deletion or destruction within the framework of KVKK art. 7
- Request notification of these operations to third parties to whom transferred
- Object to a result that arises against you through automated systems
- Claim damages if you suffer harm due to unlawful processing
7
Application Method
Pursuant to KVKK art. 13/1, to exercise your rights, you can apply to info@kefstacks.com with documents that establish your identity. Your application will be concluded within 30 days at most.