KVKK

KVKK Privacy Notice

This notice explains the purposes of personal data processing in the VefaSec security measurement platform and how data subject rights can be exercised.

Last updated: May 17, 2026

Controller and contact

For client panel, package-based security measurement and report delivery processes under the VefaSec brand, the data controller contact channel is [email protected].

Data subject requests are received through this channel with sufficient information to verify identity and request scope.

Processing grounds

Account and contact data is processed to provide the service, authenticate identity, support customers and manage contractual processes.

Domain, package, authorization declaration, billing and report records are processed to enable authorized measurement, prevent unauthorized testing and manage the commercial process.

Logs and security records are kept to protect system security, prevent abuse and provide evidence in legal disputes.

Transfers

Data may be transferred in a limited way to providers for hosting, SMS verification, email delivery, payment infrastructure, technical monitoring and legal obligations.

Transfers are limited to what is necessary for the relevant service.

Your rights

You can exercise KVKK rights such as access, correction, deletion/destruction, objection and compensation requests via [email protected].

Depending on the request, additional verification may be required; third-party rights and legal retention needs are considered for security service records.