KVKK Disclosure Notice

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to visitors, members, advertisers and anyone who contacts Watchvoy (watchvoy.com). It is a translation for convenience: the Turkish version is the binding text. Our privacy policy covers the same processing for visitors from all countries.

1. Data controller

2. Categories of personal data

• Identity and contact: name, username, email address, phone (advertisers).
• Customer transactions: watchlist, lists, ratings, comments, availability alerts, notification settings, campaigns, top-up requests, advertiser correspondence.
• Finance: advertiser billing details, bank transfer references, receipts and balance movements.
• Transaction security: IP address, password hash, session data, sign-in records, pseudonymous visitor code for ad and affiliate measurement.
• Marketing and measurement: usage data from analytics and ad frequency cookies, only with consent.
• Communications: messages and attachments you send us by email or through the contact form.

3. Purposes

• Providing the site, choosing your country and language, managing memberships.
• Sending account emails (confirmation, password reset, availability alerts) and answering requests and messages.
• Moderating comments and removing unlawful content.
• Managing advertiser accounts, campaigns, payments and invoices.
• Measuring ad impressions, ad clicks and affiliate clicks without fraud and reconciling with partners.
• Information security and preventing abuse and fraud.
• With consent, analysing and improving how the site is used.
• Providing information to authorities under legal obligations.

4. Collection method and legal grounds

Data is collected electronically, by automated and partly automated means, through the site, sign-up and advertiser forms, the contact form, email (sent via SMTP, received via IMAP), cookies and server logs. Legal grounds:

• Necessary for the conclusion or performance of a contract (KVKK Art. 5/2-c): membership, advertiser agreement, account emails.
• Compliance with a legal obligation (Art. 5/2-ç): invoicing, accounting and records under Law No. 5651.
• Establishment, exercise or protection of a right (Art. 5/2-e): disputes and copyright notices.
• Legitimate interest, provided your fundamental rights are not harmed (Art. 5/2-f): security, abuse prevention, ad and affiliate measurement.
• Explicit consent (Art. 5/1): analytics cookies (Google Analytics), the ad frequency cookie and, where needed, transfers abroad.

5. Transfers

Within these purposes, data may be transferred to our hosting provider (servers in Germany), Cloudflare (content delivery and security), our email provider, Google (Google Analytics, only with consent), authorised public bodies and legally authorised private persons such as our accountant. Transfers abroad rely on standard contracts or other safeguards under KVKK Art. 9, or on your explicit consent where these are not available. We do not sell personal data.

6. Retention

Account data until the account is deleted, ad measurement totals about 13 months, affiliate clicks up to 24 months, communications up to 2 years after the request is closed, advertiser contracts, invoices and payment records 10 years. After that, data is deleted, destroyed or anonymised.

7. Your rights under KVKK Art. 11

You may learn whether your data is processed and request information about it, learn the purpose and whether data is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction, request deletion or destruction under Art. 7, request that third parties be notified of these actions, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.

8. How to apply

Send your request with information identifying you to [email protected] (from the email address registered with us) or by signed letter to Osman Yılmaz Mah. 649/1. Sk. No: 2, Gebze / Kocaeli, Türkiye, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer free of charge within 30 days, unless the action involves an extra cost, in which case the fee set by the Board may apply. If you are not satisfied, you can complain to the Personal Data Protection Board.