Privacy Notice and Cookie Policy (KVKK)
Data Controller: Dokunduur (.com)
This notice explains how the personal data of visitors to our website and businesses using our platform is processed in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and related legislation.
1. Personal Data We Process and Collection Methods
The following data is collected by fully automated means during your visit to and use of the site: - Transaction Security Data: Your IP address and browser/device information (User-Agent, limited to 500 characters), processed temporarily to ensure cybersecurity and prevent abuse. - Contact and Feedback Data: The message content, complaint reason, and optional phone number you voluntarily share when submitting the feedback form. - Membership and Account Data: Email address and encrypted (hashed) password for business/admin users. - Analytics Data: Anonymous event data about page views and review interactions (fully anonymous first-party data containing no IP address or user identity).
2. Purposes and Legal Grounds for Processing
Your personal data is processed under Article 5 of the KVKK on the following legal grounds: - Legitimate Interest and Legal Obligation (Art. 5/2-c, 5/2-f): Keeping server access logs, IP-based rate limiting via Redis, blocking DoS/spam attacks, and fulfilling obligations under Law No. 5651. - Establishment or Performance of a Contract (Art. 5/2-c): Maintaining business owners' membership records and providing secure session management through the Better Auth system. - Explicit Consent of the Data Subject (Art. 5/1): Evaluating the data you voluntarily share via the feedback form to review your complaints and suggestions.
3. Transfer of Personal Data
Our site contains no third-party tracking or advertising codes such as Google Analytics, Meta Pixel, or Hotjar. Your personal data is not shared with third parties except for lawful requests from official authorities. However, our infrastructure provider Cloudflare (CDN/DNS) may temporarily see IP addresses at the server level for network security and traffic management. Our error tracking system (GlitchTip) is self-hosted on our own servers and does not transfer data externally.
4. Cookie and Local Storage Policy
Our site uses no cookies for profiling or advertising. All active cookies are Strictly Necessary/Technical Cookies: - better-auth.session_token and better-auth.session_data: Technical cookies used to provide a secure user session. - dokunduur_impersonate: Technical cookie used only in admin management flows. - Local Storage (sessionStorage): A portal-view:<slug> value is stored in your browser to count page views correctly per session. This data is never sent to our servers and is deleted when the browser is closed. Because these technical cookies are required for the site's core functionality, they remain active unless blocked via your browser settings.
5. Your Rights Under the KVKK
Under Article 11 of the KVKK, by applying to the data controller you have the right to learn whether your personal data is processed, to request information if it has been processed, and to request correction or deletion of your data. To exercise your rights, you can contact us through the communication channels on our website.