Data Protection Notice (KVKK)

1. Data controller

Inoslab Ventures (the "Company") is the Data Controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").

• MERSIS: 0000000000000000
• Address: Motif Sokak No:23/A, Umraniye/Istanbul, Turkey
• Data Protection Officer (DPO): info@inoslab.com.tr

2. Personal data processed

• Identity: first name, last name
• Contact: email, phone (optional)
• Customer transaction: campaign, subscription, invoice
• Account security: session, IP address, user agent, logs
• Financial: IBAN, last 4 card digits (Stripe), tax number
• Marketing: newsletter preferences (explicit consent)

3. Purposes and legal basis

• Service delivery (KVKK Art. 5/2-c): formation of the contract.
• Legal obligation (Art. 5/2-a): tax, e-invoice, log retention.
• Legitimate interest (Art. 5/2-f): security, fraud detection.
• Explicit consent (Art. 5/1): marketing newsletter, personalised offers.

4. Data transfers

Your personal data is shared with the following parties, limited strictly to the stated purposes:

• Domestic: accounting, legal counsel, tax authority.
• International: Stripe, AWS SES, Supabase (SCCs + KVKK Art. 9).
• Not shared with third-party advertising or profiling platforms.

5. Retention period

• While the account is active + 10 years (tax)
• Logs: 30/90/180 days by tier
• Marketing: until consent is withdrawn
• Anonymous analytics: indefinite

6. Your rights (KVKK Art. 11)

Applications: via info@inoslab.com.tr. We respond within 15 days.

Data Subject Request Form (email)

7. Supervisory authority

Turkish Personal Data Protection Authority (KVKK): kvkk.gov.tr