Privacy Policy and KVKK Notice
1. Purpose and scope
This document explains how your personal data is processed within the Nakits.com classifieds platform (the “Platform”) in line with KVKK, and describes our privacy practices.
2. Data controller
The data controller under KVKK is the legal entity or natural person operating the Nakits.com service. You may submit data subject requests together with information sufficient to verify your identity through the official contact channels published on the Platform. If contact details change, they will be announced on this page.
3. Categories of personal data processed
- Identity and contact: name and surname or business name, email address, phone number; other information you include in your profile or listing content.
- Account and transactions: membership data, listing text and images, favourites, messaging content, moderation and support records.
- Technical and usage: IP address, device and browser information, session and security logs, and data collected via cookies and similar technologies.
4. Purposes of processing
- Creating membership, authentication, and managing your account.
- Publishing listings and providing search and showcase features.
- Enabling communication between buyers and sellers through the Platform.
- Security, fraud and abuse prevention; fulfilling legal obligations.
- Improving service quality, fixing errors, and statistical analysis (using anonymised or aggregated data where possible).
- Providing information to public authorities and defending legal claims.
5. Legal bases
Processing is based on the grounds set out in Articles 5 and 6 of KVKK, such as explicit consent, performance or conclusion of a contract, legitimate interests of the controller, compliance with a legal obligation, or processing expressly permitted by law. The applicable ground depends on the specific processing activity.
6. Transfers
Service providers (for example cloud/hosting and authentication providers) may be used for hosting the Platform and database operations. In that context, your data may be transferred within Turkey or abroad to the extent required for the service and subject to contractual safeguards and KVKK-compliant transfer mechanisms. Data may be disclosed to public institutions where required by law.
7. Retention
Personal data are stored for as long as necessary for the purposes for which they are processed. Account and listing data are deleted, destroyed, or anonymised when active use ends or when statutory limitation or audit requirements no longer apply; retention periods follow applicable law and operational needs.
8. Your rights under KVKK
As a data subject, under Article 11 of KVKK you have the right to:
- Learn whether your personal data are processed,
- Request information if processed, and learn whether they are used for the intended purpose,
- Know third parties to whom data are transferred (if any),
- Request rectification if processed incompletely or inaccurately,
- Request erasure or destruction within the conditions set out in law,
- Request notification of such actions to third parties to whom data were transferred,
- Object to a result adverse to you arising solely from automated analysis,
- Request compensation for damage stemming from unlawful processing,
You may submit requests to the data controller. We respond within the statutory timeframe. If you are dissatisfied with the outcome, you may lodge a complaint with the Turkish Personal Data Protection Board (kvkk.gov.tr).
9. Security
We apply appropriate technical and organisational measures to protect the confidentiality and integrity of personal data. Transmission over the internet is never 100% secure; please use a strong password and do not share your account credentials.
10. Cookies
Cookies and local storage may be used to manage your session and preferences. You can restrict cookies via your browser; some Platform features may then work only in a limited way.
11. Changes
This policy may be updated. Material changes will be communicated on the Platform where feasible; checking the “last updated” date on this page is sufficient.
Related: Terms of Service