KVKK Privacy Notice

As data controller under Personal Data Protection Law No. 6698 (the "KVKK"), Yonevo Yazılım ("Yonevo") processes the personal data set out below for the purposes explained and in accordance with the relevant legislation.

• Data Controller: Yonevo Yazılım
• Contact: destek@yonevo.com
• Website: https://yonevo.com

Because of the nature of the service, the following categories of personal data are processed:

• Identity: first name, surname, Turkish ID number (where required in resident records).
• Contact: email, telephone, address.
• Customer transactions: subscription details, invoices, payment history.
• Finance: bank account transactions, IBAN, cheque and promissory note records.
• Transaction security: IP address, session information, browser/device information, log records.
• Marketing (with consent): newsletter subscription, survey responses.
• Visit and conversion measurement (with consent): visit identifier, referring domain, campaign tags and the sign-up source linked to your account; and, with marketing consent, advertising click identifiers.

Your data is processed for the following purposes:

• Concluding and performing the contract (subscription, provision of the service).
• Maintenance fee collection, invoicing and keeping accounting records.
• Matching financial transactions through bank integrations.
• Handling customer support requests.
• Fulfilling legal obligations (VUK, TTK, MASAK, KVKK).
• Ensuring system security and preventing fraud.
• Marketing and satisfaction measurement where you have given explicit consent.
• With your analytics consent, measuring the marketing pages and sign-up sources, and linking source and campaign information to the account you create. The use of advertising click identifiers additionally requires marketing consent.

• Necessity for concluding or performing a contract (Art. 5/2-c).
• Being expressly provided for by law and the fulfilment of a legal obligation (Art. 5/2-a, ç).
• Provided that it does not harm the fundamental rights and freedoms of the data subject, legitimate interest (Art. 5/2-f).
• Explicit consent (Art. 5/1) — for marketing messages and optional analytics cookies.

Within the framework of Articles 8 and 9 of the KVKK, your data may be transferred to the following parties only to the extent necessary to provide the service:

• Within Turkey: cloud providers located in Turkey, partner banks, payment institutions and authorised public bodies.
• Transfer abroad: Customer data containing your maintenance fee, resident and accounting records is stored on servers in Turkey . However, some of the infrastructure services we use to run the service are based abroad, and limited technical data is transferred abroad in this context. The services involved and the data transferred:
  • Content delivery network and firewall: IP addresses and request metadata, to carry web traffic and filter out malicious requests.
  • Visit and conversion measurement: With analytics consent, marketing page and sign-up conversion events are sent to Google Analytics. If the Google Ads connection is active, advertising conversion data is also sent with marketing consent. Names, email addresses and phone numbers are not added to measurement events. The sign-up source kept in Yonevo is linked to your account and is not anonymous. You can change your cookie preferences at any time; details are set out in the Privacy Policy.
  • Mobile notification infrastructure: Device notification tokens and notification content, to deliver app notifications.
  • SMS and email delivery infrastructure: The phone number or email address the message is sent to, and the message content. The transactions and amounts of an account statement are not put in the email; the recipient views the statement from our servers in Turkey through a time-limited link.
  These transfers are limited to what is necessary to provide the service and are carried out in line with the conditions of Article 9 of the KVKK.

Your personal data is collected by automated or partly automated means through website forms, account creation, resident invitation links, bank API integration, customer support correspondence, cookies and logging systems.

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties to whom it is transferred in Turkey or abroad.
• Request correction if it has been processed incompletely or inaccurately.
• Request its deletion or destruction.
• Request that a correction or deletion be notified to the third parties to whom the data was transferred.
• Object to a result against you that arises from analysis exclusively by automated systems.
• Claim compensation for damage suffered due to unlawful processing.

To exercise the rights above, you can apply by one of the following methods in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller:

• Email (from your registered address): destek@yonevo.com — write "KVKK Başvurusu" (KVKK application) in the subject line.
• KEP (registered electronic mail) / notary: please contact our support team for formal written application channels.

Your application is concluded within 30 days at the latest after it reaches us, free of charge depending on the nature of the request. If the process involves a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

For processing that relies on explicit consent (marketing messages, optional cookies, etc.), you can at any time, through panel > notification preferences or by notice to our support address, withdraw your consent. Withdrawal does not affect the lawfulness of earlier processing.

This Privacy Notice may be updated because of changes in legislation or in the scope of the service. Significant changes are notified to your registered email address, and the effective date at the top of the page is always kept up to date.