Personal Data Protection (KVKK) Clarification Text

As qriviobarcode.com (hereinafter referred to as the "Platform"), we would like to inform you about the processing and security of your personal data in accordance with the Personal Data Protection Law No. 6698 ("KVKK").

1. Data Controller

Your personal data processed within the scope of the services offered on the platform are processed by the Platform management in the capacity of data controller, within the purposes and limits explained below.

2. Processed Personal Data

During your use of the platform, the following personal data are processed:

• Transaction Security Data: IP address you use to access the platform, access date and time (log records).
• Content Data: Text, link, or numerical data you voluntarily enter into the forms to generate a barcode or QR code.
• Cookie Data: Google Analytics cookies used to perform statistical analysis of the site (These data are processed anonymously).

3. Purpose and Legal Ground for Processing Personal Data

Your collected personal data are processed automatically based on the legal grounds of KVKK Article 5/2 (ç) "It is necessary for compliance with a legal obligation to which the data controller is subject" and (f) "Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject" for the purposes of:

• Ensuring the technical security of the platform and detecting possible cyber attacks,
• Preventing illegal or prohibited uses,
• Responding to legal requests from authorized public institutions and organizations (obligations under Law No. 5651).

4. Transfer of Personal Data

Your processed personal data (IP log records and generated contents) are not sold or shared with third parties or institutions for any commercial purpose. These data can only be shared with the relevant official institutions in the event of a legal dispute or upon the lawful request of authorized judicial/administrative authorities.

5. Data Retention Period

IP addresses and transaction log records are stored in our secure databases for the statute of limitations stipulated by legal regulations (typically 1 to 2 years) and are permanently destroyed or anonymized at the end of the period.