Disclosure Notice under Law No. 6698 on the Protection of Personal Data

1. Identity of the data controller

Under Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller is Ricordly. Email: support@ricordly.com.

2. Personal data processed

• Identity and contact data: full name, email address, billing details.
• Visual data: event cover photo and photos uploaded by guests.
• Transaction security data: IP address, device/browser fingerprint, session and cookie data, Turnstile verification record.
• Financial data: order and transaction result information relayed by the payment provider (card details are never processed by us).

3. Purposes of processing

• Providing the Ricordly service, creating events and guest upload pages,
• Carrying out payment processes and billing,
• Maintaining system security and quota/limit controls,
• Handling support requests,
• Complying with legal obligations.

4. Transfer of personal data

Your personal data may be shared, to the extent necessary to provide the service, with our database and authentication provider (Supabase), our photo storage provider (Cloudflare R2), our bot/abuse protection provider (Cloudflare Turnstile), and our payment provider (iyzico). These providers' servers may be located abroad; in that case, transfers are carried out in accordance with Article 9 of KVKK and applicable law.

5. Method and legal basis of collection

Your personal data is collected electronically while you use the platform, based on the legal grounds of being directly related to the establishment or performance of a contract, compliance with a legal obligation, the data controller's legitimate interest, and, where required, your explicit consent (KVKK Art. 5).

6. Rights of the data subject

Under Article 11 of KVKK, you have the right to learn whether your personal data is processed, request information if it is, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred domestically or abroad, request correction if processed incompletely or incorrectly, request its deletion or destruction under the conditions set out in KVKK, request that correction/deletion be notified to third parties to whom the data was transferred, object to a result that is to your detriment arising from analysis exclusively through automated systems, and request compensation for damages arising from unlawful processing.

7. How to apply

To exercise the rights above, you may send your request by email to support@ricordly.com. Requests are concluded free of charge within 30 days at the latest, depending on their nature.