KVKK Notice
Draft KVKK notice for Hand of Care website visitors and lead-form submissions in Turkiye.
Last updated: 2026-04-05
Draft controller identity
Tuna Project Global Ticaret Anonim Şirketi acts as the draft data controller for the public website and lead collection flows of Hand of Care. Corporate registry identifiers used in this draft are: MERSIS 0861109944300001, Tax Number 8611099443, registered address Fuat Edip Baksı Mah. Anadolu Cad. 175/1 D:13 Bayraklı İzmir 35540 Türkiye, KEP tunaproject@hs01.kep.tr.
Until final legal review is completed, website-side privacy questions may be directed to info@handofcare.com and 0 232 335 25 15.
Categories of personal data processed
Through website forms and commercial communication channels, Hand of Care may process identity and contact data, request content, role information, package interest, message content voluntarily shared by the visitor, and limited technical/security data required to operate the website.
If a visitor shares health-related context in a free-text field, such data should be treated cautiously and minimized to the extent possible within the public website environment.
Purposes and legal basis context
Personal data may be processed for responding to requests, conducting demo or sales follow-up, evaluating service suitability, managing lead operations, ensuring website security, handling communications, and fulfilling legal obligations where applicable.
The final legal-basis matrix under Law No. 6698 should be confirmed by counsel based on the exact company structure, data flows, and operational stack used in production.
Collection method, transfer, and retention
Data may be collected electronically through web forms, email, cookies or technical logs, hosting infrastructure, analytics tools, and security systems. Transfers may occur to hosting, communication, analytics, CRM, or support providers to the extent necessary for legitimate operations. Current website planning includes cookie-based measurement and Google Analytics 4 (G-5DV9M95WVD).
Retention periods should be finalized by category. As a draft operating rule, lead and communication records, security logs, analytics data, contractual files, and legal-compliance records should each have separate review and deletion schedules, with longer retention applied only where commercial, tax, audit, or dispute obligations justify it.
Rights of data subjects and application channel
Under Article 11 of Law No. 6698, data subjects may request information about whether their data is processed, the purpose of processing, domestic or international recipients, correction, deletion, or compensation where legal conditions are met.
Until a formal KVKK application workflow is published, draft requests may be directed to info@handofcare.com. The final published text should also include written-application instructions, identity-verification steps, response timelines, and the corporate application channel that will be used in practice.
Lawyer review checklist
Before launch, counsel should review and complete the following items: legal-basis matrix, cookie/analytics disclosures, transfer inventory, retention schedule, VERBIS requirement assessment, application workflow, and any special-category data handling restrictions.