KVKK Disclosure Notice

Data controller — PostBase.tv platform. Legal entity: Alican Tarımcı (sole proprietorship, Türkiye). Business address: TBD (registered address to be published). VERBİS registration: We are below the threshold under KVKK Article 16 (annual net revenue 100M TRY or staff > 50) and therefore not required to register; once we cross the threshold the VERBİS registration number will be published on this page. All KVKK requests must be sent to info@postbase.tv.

info@postbase.tv

The following categories of data are processed in connection with the service:

• Identity data: first name, last name, username.
• Contact data: email address.
• Professional data: title, biography, filmography (credits), software used, areas of expertise, working city.
• Visual data: profile picture (avatar), portfolio images.
• Transaction security data: IP address, session data, user agent, login timestamps.
• Customer transaction data: messages, applications, connection requests, briefings.

Personal data are processed for the following purposes:

• Account creation and account management.
• Building professional profiles, matching producers with freelancers, and providing communication services.
• Account security, fraud prevention, and abuse detection.
• Maintaining legally required records and providing information to authorized institutions.
• Improving service quality and resolving technical issues.

Personal data are processed under KVKK Article 5 on the grounds of: (a) being necessary for the establishment and performance of a contract, (b) fulfilling a legal obligation, (c) the legitimate interest of the data controller, and where required, (d) the explicit consent of the user.

Personal data are collected automatically or semi-automatically through information entered by users at registration, profile updates, interactions on the platform, and logs produced by the technical infrastructure.

We share data with the following sub-processors: Cloudflare (CDN/WAF — US edge), Oracle Cloud Frankfurt (media storage — EU), Sentry GmbH (Germany/US — error monitoring; activated when analytics consent is granted), Google LLC (OAuth/Analytics/reCAPTCHA — US), Zoho Mail (India/EU — email delivery), GitHub Inc. (US — source and deployment infrastructure; no end-user data). Standard Contractual Clauses (Module 2) are in place; cross-border transfers under KVKK Article 9 rely on your recorded explicit consent. See docs/dpa/README.md for SCC status.

Personal data are retained for as long as the account is active and, after deletion, for the period required by legal obligations. Following a deletion request, data are permanently erased after the 30-day grace period; audit logs are auto-cleaned after 90 days.

Under KVKK Article 11, every user may exercise the following rights by contacting the data controller:

• Learn whether their personal data are being processed.
• Request information about such processing.
• Learn the purpose of processing and whether it is being used in accordance with that purpose.
• Learn the third parties to whom data are transferred domestically or abroad.
• Request rectification if data are incomplete or inaccurate.
• Request erasure or destruction under KVKK Article 7.
• Object to a result that arises against them as a consequence of automated processing.
• Claim compensation for damages caused by unlawful processing.

An automated ranking algorithm sorts profiles and produces recommendations on the Discover page. The score is calculated from profile completeness, recent activity, software/role tags you've added, and availability. This processing constitutes profiling under KVKK Article 11/g. If a result adversely affects you, you have the right to request manual review — write to info@postbase.tv.

To exercise your rights under KVKK, please contact info@postbase.tv with documents verifying your identity. Self-service data export and account deletion options are also available from your account settings. Right to complain: Turkish Personal Data Protection Authority — kvkk.gov.tr.

info@postbase.tv