Skip to content
Sign In Order Now
CanTürk

Personal Data Protection Notice

Son güncelleme: 2026-06-15

Personal Data Protection Notice (KVKK)

Last Updated: 15 June 2026

1. Data Controller

Your personal data is processed by Muhammet Mildan — CanTürk Immigration and Education Consultancy (Mesihpaşa Mah. Mesihpaşa Cad. No:1 Erseven Business Center, Suite 12, Fatih / Istanbul, Turkey; email: ceviri@canturkceviri.com; phone: +90 535 934 50 84; Tax ID: 6210614707, Beyazıt Tax Office), acting as data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").

2. Categories of Personal Data and Purposes of Processing

  • Identity and Contact Data: Name, surname, email address, phone number — for account creation, order management, notifications and customer support.
  • Document Data: Personal data contained in documents uploaded for translation (identity cards, passports, diplomas, criminal records, powers of attorney, etc.) including address, date of birth, ID number and photograph — for assignment to a sworn translator and performance of the translation service.
  • Special Categories of Personal Data: Uploaded documents may include biometric data (photograph), health data, criminal/judicial records, or religious affiliation, which are classified as sensitive under KVKK Art. 6. These are processed only with your explicit consent and to the extent strictly necessary for the service.
  • Financial Data: IBAN details (payment receipts), invoice information — for payment tracking, invoicing and legal compliance. Card details are not stored by us; they are processed via iyzico's payment infrastructure.
  • Transaction Data: Order history, service type, delivery method, upload/download timestamps — for contract performance and legal record-keeping obligations.
  • Technical Data: IP address, session information, platform access logs — for security, unauthorized access detection and legal compliance.

3. Legal Bases for Processing

  • KVKK Art. 5/2(c): Necessity for the establishment or performance of a contract — processing orders and delivering translation services.
  • KVKK Art. 5/2(ç): Fulfilling a legal obligation — tax legislation and Turkish Commercial Code record-keeping requirements.
  • KVKK Art. 5/2(f): Legitimate interests — platform security and fraud prevention.
  • KVKK Art. 5/1 and Art. 6/2: Explicit consent — for special category data and international transfers (obtained via a separate Explicit Consent Form).

4. Disclosure of Personal Data

Your personal data may be shared with the following recipient groups:

  • Sworn Translators: Only for performance of the translation service, under NDA, limited to the assigned document.
  • Infrastructure and Cloud Service Providers: Supabase (database/storage, USA — under SCCs/adequacy decision), Netlify (hosting, USA — under SCCs), Resend (email delivery, USA — under SCCs).
  • Payment Service Provider: iyzico Ödeme Hizmetleri A.Ş. (for card payments, limited to the payment transaction).
  • Cargo Companies: Name, surname and delivery address when physical delivery is chosen.
  • Competent Authorities: When required by law or court order.

5. Retention Periods

  • Translation document files: 2 years after order completion (while account is active); permanently deleted upon account deletion.
  • Invoices and payment records: 10 years as required by tax legislation.
  • Security and access logs: 1 year.
  • Account information: Duration of active account; permanently deleted within 30 days of a deletion request.

6. Your Rights

Under KVKK Art. 11, you have the right to: learn whether your data is being processed; request information if it is; learn the purpose of processing and whether it is used accordingly; know the third parties to whom data is transferred domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under the conditions in Art. 7; request notification of corrections/deletions to third parties; object to automated processing that produces decisions against you; and claim compensation for damages arising from unlawful processing.

7. How to Submit a Request

To exercise your rights, email ceviri@canturkceviri.com or send a signed petition to Mesihpaşa Mah. Mesihpaşa Cad. No:1 Erseven Business Center, Suite 12, Fatih / Istanbul, Turkey. Requests are concluded within 30 days after identity verification, free of charge (fees set by the Personal Data Protection Board apply if additional cost is incurred).

Legal Notice: This document is provided for informational purposes only and should be reviewed by a qualified legal adviser before it is put into effect.