KVKK Privacy Notice

Pursuant to Article 10 of KVKK, in the capacity of data controller:

A service operated individually under the Atosweb brand.
E-mail: [email protected]

Weble.TR is a service developed individually under the Atosweb brand and currently offered free of charge. The exemptions regarding the obligation to register with the Data Controllers Registry (VERBİS) are assessed in accordance with the Board decisions; in the event of legislative changes and growth in scale, registration with VERBİS will be carried out.

• Identity: Username, display name
• Contact: E-mail address
• Transaction security: Password hash, session information, IP address, cookie records, 2FA TOTP secret (encrypted)
• Marketing: Transaction history (link/click events), browser/device information (for anonymous/statistical purposes only)
• Visual records: Avatar and link cover images you upload

• Carrying out membership procedures and providing the Service (KVKK m.5/2-c — conclusion of a contract)
• Account security and session management (KVKK m.5/2-f — legitimate interest)
• Prevention of misuse (rate limit, blocklist, automated URL check) — legitimate interest
• Producing statistics (only for dashboard visuals belonging to you) — performance of the contract
• Responding to requests from official authorities (KVKK m.5/2-ç)
• Communication and service notifications (KVKK m.5/2-c)

Your personal data may be transferred to our domestic and foreign service providers for the following purposes, within the framework of Articles 8 and 9 of KVKK:

• Cloud infrastructure: Cloudflare (international), Hetzner (Germany)
• Database: Neon (EU)
• E-mail delivery: Brevo (EU)
• Error and performance tracking: Sentry (EU)
• URL security check: Google Web Risk (only the URL you add is queried; account information is not transferred)
• OAuth sign-in:The provider you prefer (Google, Discord) — only if you choose one

Cross-border transfer is mandatory for the Service to be technically provided, and the security measures envisaged under KVKK are applied.

Your personal data is collected electronically; directly by you (account registration, profile editing) and through automated means while using the Service (session, click events, browser information).

Legal bases: KVKK m.5/2-c (conclusion and performance of a contract), m.5/2-ç (legal obligation), m.5/2-f (legitimate interest).

Pursuant to Article 11 of KVKK, you have the following rights at all times:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used in accordance with its purpose
• To know the third parties to whom it is transferred domestically/abroad
• To request its correction if it has been processed incompletely/incorrectly
• To request its deletion or destruction within the conditions set out in KVKK
• To request that correction/deletion operations be notified to the third parties to whom the data has been transferred
• To object to a result against you arising from analysis by automated systems
• To claim compensation if you have suffered damage due to unlawful processing

You may submit your applications through the following means, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”:

• E-mail: [email protected] (from your registered e-mail address)

Your applications are concluded free of charge within 30 days at the latest. If the procedure entails an additional cost, the fee in the tariff determined by the Board may be charged.