1. Scope
Under Articles 11 and 13 of the Personal Data Protection Law No. 6698 (KVKK), you have certain rights regarding your personal data. This page is a guide to exercising those rights in practice. The main privacy notice is on the KVKK Privacy Notice page.
2. KVKK Article 11 — Your 9 Rights
| Right | Description | Practical Example |
|---|---|---|
| 11/a Obtain information | Learn whether your data is being processed | "Am I recorded in your database?" |
| 11/b Request details | If it is processed, request information about it | "Which of my data is held, and for how long?" |
| 11/c Learn the purpose | Learn the purpose of processing and whether it is used in line with that purpose | "What is my data used for?" |
| 11/ç Transfer list | Know the third parties to whom it is transferred (domestic/overseas) | "Which providers are my analyses transferred to? For example, AI analysis uses Google Gemini and Anthropic Claude (USA); for the full list see the KVKK cross-border transfer table." |
| 11/d Rectification | Request correction if processed incompletely or incorrectly | "My e-mail was recorded wrong, please correct it." |
| 11/e Erasure | Request erasure or destruction within the framework of KVKK Article 7 | "Delete my account, destroy all my data." |
| 11/f Notify recipients | Notification of rectification/erasure to the third parties to whom data was transferred | "Pass my correction on to providers such as Sentry/PostHog too." |
| 11/g Object to automated decisions | Object to an adverse outcome resulting from analysis solely by automated systems | "I object to the assessment in the AI price/condition report; I want human review or erasure." |
| 11/ğ Compensation for damages | Request remedy for damage caused by unlawful processing | (Legal route, with a lawyer) |
About your right to object to automated decisions (11/g)
Bunayorumum analyses listings and produces an automated AI price/condition assessment. This report is for informational purposes; it is not a final or binding decision and does not replace investment or buy/sell advice. If you wish to object to the result of an analysis, you can write to iletisim@bunayorumum.net attaching the relevant report link or number, and request that the result be reviewed by a human or deleted.
Data categories that may be subject to a request
Your access, rectification or erasure request may cover the following data categories:
- Account and identity information: name, e-mail
- Analysis history and AI reports
- Wallet balance, payment and bank-transfer (Havale) records
- Gift card / referral credits
- Session, security and 2FA data
- Marketing and consent preferences
3. Request via the Panel (Logged-in Users)
If you are logged into your account, you can use the form below to create an official request that leaves a trail in the system. Your request is recorded in the database, a confirmation e-mail is sent, and you can track its status on this page.
Because requests submitted via the panel come from your logged-in account (protected by 2FA if enabled), your identity is deemed verified through the session; you also do not need to send an identity document.
4. Other Request Channels
Under KVKK Article 13/1, your request must be made in writing or by other methods determined by the Board:
- E-mail (recommended): iletisim@bunayorumum.net
Sending it from the e-mail address registered to your account speeds up identity verification. - Post: Our address for service of notice is shared upon request (you can send an address request to iletisim@bunayorumum.net).
For requests received by e-mail, sending the request from the e-mail address registered to your account speeds up identity verification. To prevent abuse, we may request additional identity verification from you where necessary.
To opt out of marketing/İYS (İYS, Turkey's commercial-message management system) messages only, or to request removal of consent-based analytics (e.g. PostHog) data, you do not need to make a full KVKK request; you can manage these from the Explicit Consent Statement and Cookie Policy pages or from your account settings.
5. Information Your Request Must Include
Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller (10.03.2018, Article 5), your request must contain the following information:
- First name, surname (and signature in a written request)
- Turkish ID number (for Turkish citizens); passport number for foreign nationals
- Residence/business address for service of notice
- E-mail address, telephone, fax for notification, if any
- Subject of the request (which of your rights you wish to exercise)
If information is incomplete, the Authority grants us a period to request additional information (thirty days); this period is not added to the response time.
6. Template Petition (For Written / E-mail Requests)
You can adapt the template below to your own situation and use it:
Dear Bunayorumum, Pursuant to Articles 11 and 13 of the Personal Data Protection Law No. 6698, I wish to exercise the following rights: [ ] (a) Learn whether my personal data is being processed [ ] (b) If processed, information on what data is involved [ ] (c) Learn the purpose of processing [ ] (ç) Know the third parties (domestic/overseas) to whom data is transferred [ ] (d) Correction of incomplete/incorrect information [ ] (e) Erasure/destruction under KVKK art. 7 [ ] (f) Notification of the action taken to third parties [ ] (g) Object to an automated decision [ ] (ğ) Compensation for damages Reason and details of my request: [state your request clearly, e.g. "The e-mail address on my account was recorded incorrectly, please correct it" or "Delete my account and all my personal data"] My identity details: - Full Name: [Your Full Name] - Turkish ID No: [11-digit number] - E-mail registered at Bunayorumum: [account e-mail] - Address for service: [Full address] - Contact e-mail: [e-mail for the reply] - Telephone (optional): [+90 ...] Pursuant to KVKK Article 13/2, I kindly ask that my request be answered within 30 days at the latest. Kind regards, [Signature, in a written request] [Date: DD.MM.YYYY]
7. Response Time and Fee
- Response time: Depending on the nature of the request, it is concluded within 30 days at the latest (KVKK Article 13/2).
- Fee: The request is, as a rule, free of charge. However, if the action additionally entails a cost, the fee in the tariff set by the Board may be charged (Communiqué Article 7).
- Communiqué tariff (2024-2026): If the information needs to be delivered physically on CD/USB or as a printout, a specific fee may be charged; electronic delivery is, as a rule, free of charge.
- Erasure request and statutory retention: Even if your erasure request is accepted, data subject to a statutory retention obligation such as payment and invoice records (Tax Procedure Law No. 213 and related legislation) is kept until the retention period expires; it is deleted at the end of that period. Your other personal data not covered by this obligation is deleted upon your request.
8. If You Are Not Satisfied: KVKK Complaint
If your request is not answered within 30 days, or you are not satisfied with the response, you may lodge a complaint with the KVKK Authority within 30 days from the date of the response and, in any case, within 60 days from the date of the request:
- KVKK website: kvkk.gov.tr
- Online application: e-complaint
To complain, you are first required to apply to the data controller (KVKK Article 14/2); that is, if you apply directly to the KVKK without writing to Bunayorumum, the Authority will not accept your application.
9. Contact
For your questions or requests: iletisim@bunayorumum.net
Related pages: KVKK Privacy Notice · Explicit Consent Statement · Cookie Policy · Terms of Use