Privacy Policy &
Data Notice
The security and privacy of your data is AskHediyem's core priority. Below is detailed information prepared in accordance with Turkish Law No. 6698 (KVKK).
1. Data Controller and Legal Basis
AskHediyem processes its users' personal data as the "Data Controller", relying on the legal grounds set out in Article 5 of Turkish Law No. 6698 (KVKK): "being directly related to the establishment or performance of a contract" and "being mandatory for the data controller to fulfill its legal obligation".
Your data is processed in accordance with the law and principles of good faith, for specified, explicit, and legitimate purposes.
2. What Data Do We Process?
Membership Data
Name, surname, email address. Required to secure your account and manage content specific to you.
Images and Text Content
The images, videos, and messages you upload to your site. Processed solely to present that specific website.
Transaction Security
IP address, device information, login/logout records. Required to be retained under Turkish Law No. 5651.
Payment Security
Your card information is processed on PCI-DSS compliant PayTR infrastructure. Never stored on our servers.
3. Technical and Administrative Measures
AskHediyem uses top-tier technical infrastructure to protect your data:
- ✓
End-to-End Encryption: All data transmissions are encrypted using 256-bit SSL (TLS 1.3).
- ✓
Database Security: Critical user data and passwords are stored one-way hashed using the bcrypt algorithm.
- ✓
Regular Backups: Your data is regularly backed up to secure servers to guard against potential hardware failures.
4. Rights of the Data Subject (KVKK Article 11)
Under KVKK, every user has the following rights:
• Learn whether your data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing,
• Request correction of inaccurately processed data,
• Request deletion or destruction of your data,
• Request compensation for damages arising from unlawful processing.
To exercise these rights, you may open a support request or apply to help@webauro.com with a secure electronic signature.
5. Data Transfer and Third Parties
Your personal data may only be shared with the following parties, strictly for the purpose of providing the service:
- Payment Providers: With PayTR, to process payment.
- Infrastructure Providers: With data centers providing server and database hosting.
- Legal Authorities: In line with official requests from prosecutors, courts, or relevant public institutions.
Your data is never sold to third parties or advertising networks for commercial purposes.
6. Data Retention Period
Your data continues to be processed for as long as your membership is active. If your membership is deleted, all your personal data — except data that must be retained due to legal obligations (e.g. 10 years for financial records, 2 years for traffic data) — is anonymized or destroyed within 6 months.
Your privacy is our top priority. By using this policy, you are deemed to have accepted our terms.