KVKK Data Protection Notice
Last updated: 2026-09-19
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by data controller Turgut Ürer within the scope described below.
1. Identity of the Data Controller
Data controller: Turgut Ürer
Address: Denizköşkler Mahallesi, Hasan Çelebi Sokak No: 19, Avcılar/Istanbul, Türkiye
KVKK application email: turgut.urer@gmail.com
General contact: info@renderhane.com
2. Personal Data Processed
Depending on your use, we may process name, surname, email, user and OAuth identifiers, profile photo; uploads and prompts, generated outputs, job and credit history; order and payment status; IP, device/browser, access, error and security logs; cookie/similar technology choices; and support correspondence. Payment-card details are processed by the payment provider and are not stored by Renderhane.
3. Purposes and Legal Bases
• Account creation, authentication, service and credit delivery: KVKK Art. 5/2(c), establishment or performance of a contract
• Invoicing, accounting, and authority requests: Art. 5/2(ç), legal obligation
• Claims, objections, and disputes: Art. 5/2(e), establishment, exercise, or protection of a right
• Security, debugging, and misuse prevention: Art. 5/2(f), legitimate interests without prejudice to fundamental rights
• Analytics, advertising personalisation, and optional marketing: Art. 5/1, separate and withdrawable consent
Notice and consent are handled separately; consent is not requested where another lawful basis applies.
4. Collection Methods
Data is collected by automated or partly automated means through registration and payment forms, uploads and generation operations, support communications, authentication providers, server and security logs, and optional cookies/similar technologies only where you permit them.
5. Recipients and International Transfers
Data may be shared only as necessary with Supabase (database/authentication), Cloudflare (delivery/storage), fal.ai (AI processing), Google (OAuth and, with consent, Analytics/AdSense), Panola (analytics with consent), iyzico (payments), Resend (transactional email), competent authorities, and legal or financial advisers.
Where data is transferred to overseas providers, one of the valid transfer conditions and any applicable safeguard under KVKK Art. 9 must be used. You may ask the data controller which current mechanism applies.
6. Retention and Disposal
Data is retained while required by the processing purpose, contractual relationship, statutory periods, and limitation needs. Account/content data is deleted, destroyed, or anonymised after a deletion or closure request when no overriding duty remains; payment/accounting data after statutory periods; and technical/security logs after a risk-proportionate operational period. Deletion from backups completes through the technical backup cycle.
7. Data Subject Rights
Under KVKK Art. 11, you may ask whether data is processed; request information; learn the purpose and whether use is consistent with it; know domestic or overseas recipients; request correction; request deletion or destruction under Art. 7; request notification of those operations to recipients; object to an adverse result produced solely by automated analysis; and claim compensation for unlawful processing.
8. How to Apply
You may send a written application to Denizköşkler Mahallesi, Hasan Çelebi Sokak No: 19, Avcılar/Istanbul, Türkiye, or email turgut.urer@gmail.com from an address you previously provided to Renderhane and that is registered in our systems. Include your name, signature for written applications, identity/contact details, the request, and information reasonably needed to verify it. Do not send an unnecessary copy of your identity document. Applications are answered free of charge within 30 days; the Board tariff may apply where an additional cost is incurred.