Personal Data Notice (KVKK)
Updated:
This notice is provided under Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK"). It tells visitors of vesselcall.com, people who request a demo or contact us, and users of our customer platform why and on what legal basis we process their personal data, who receives it, and how to use their rights under KVKK Article 11.
This is the English version of our Turkish notice (KVKK Aydınlatma Metni). If the two versions differ, the Turkish version prevails. If you received an introduction e-mail sent through VesselCall, please read our information for e-mail recipients.
1. Data controller
- Legal name: VesselCall ("VesselCall", "we", "us")
- Address: Türkiye
- MERSİS number (Turkish central trade registry number): to be published once company registration is completed
- E-mail: info@vesselcall.com
2. Personal data we process
| Data category | Examples | Who it concerns |
|---|---|---|
| Identity | Name, the company you work for, your user role | Demo requesters, customer users |
| Contact | E-mail address, phone number | Demo requesters, customer users |
| Customer transaction | Content of your request or message, ports of interest, plan and subscription details, templates, sending logs, support correspondence | Demo requesters, customer users |
| Transaction security | IP address, browser information, time of request, login records, two-factor authentication setting, audit records | Site visitors, customer users |
| Finance | Amount, date and status of payments, bank transfer records, invoice details (no card data) | Customer users |
| Legal transaction | Acceptance records for the Terms of Use and other documents (version, time, IP address), official correspondence | Customer users |
We do not ask for special categories of personal data (for example health, religion or biometric data). Please do not include such information in your messages.
3. How we collect personal data
We collect personal data partly by automated and partly by non-automated means, through these channels:
- the demo and contact form on our website (you enter the information),
- logs that our servers record automatically when you visit the website,
- account, content, login and sending records created while you use the platform,
- information you share with us by e-mail, by phone or in meetings,
- payment notifications from the payment institution PayTR.
For card payments, card details are entered on PayTR's payment page; we do not see or store them.
4. Purposes of processing
- answering demo and contact requests, and handling offers and contracts,
- continuing the B2B sales conversation after your request,
- opening your platform account, providing the service and support,
- handling payments, invoicing and accounting,
- protecting information and infrastructure security, and preventing abuse,
- meeting retention and reporting duties under the law (for example Turkish Law No. 6563, tax and commercial law),
- establishing, exercising and defending rights in disputes,
- answering information requests from competent authorities.
5. Legal grounds
We process your personal data on the following legal grounds listed in KVKK Art. 5(2):
| Legal ground (KVKK Art. 5(2)) | Used for |
|---|---|
| (c) Processing is directly related to entering into or performing a contract | Demo and offer process, account opening, providing the service, payment |
| (ç) Processing is necessary to fulfill our legal obligations | Invoice and accounting records, records under Law No. 6563, requests from authorities |
| (e) Processing is necessary to establish, exercise or protect a right | Contract acceptance records, records used as evidence in disputes |
| (f) Our legitimate interests, provided your fundamental rights and freedoms are not harmed | Server and security logs, sales follow-up after your request |
We do not rely on your explicit consent for the processing covered by this notice.
6. Transfers of personal data
Within Türkiye:
- The payment institution PayTR, to process card payments (Art. 5(2)(c)).
- Competent public authorities, for information and document requests under the law (Art. 5(2)(ç)).
- Our legal and accounting advisers, where necessary and under confidentiality (Art. 5(2)(ç), 5(2)(e), 5(2)(f)).
Abroad:
- Hosting provider: our servers are in a data center in Finland, in the European Union, so the data listed in this notice is stored there. We plan to move the service to a data center in Türkiye later.
- AI service providers, to translate template text. Information you type directly into a template (for example a name written in the text) is transferred as part of the text to be translated. These providers may be located outside Türkiye and the EU, for example in the United States.
For transfers abroad we use the standard contract mechanism announced by the Turkish Personal Data Protection Board under KVKK Art. 9(4)(c).
7. Retention periods
We keep personal data for as long as needed for the purpose of processing and for the periods required by law: server logs for 14 days; demo and contact requests for 2 years after the last contact; customer account data for the term of the contract and then for statutory retention periods. All periods are listed in the table in our Privacy Policy. When a period ends, we delete, destroy or anonymize the data.
8. Your rights under KVKK Article 11
By applying to us as the data controller, you can:
- (a) learn whether your personal data is processed,
- (b) request information about the processing, if your data has been processed,
- (c) learn the purpose of the processing and whether the data is used in line with that purpose,
- (ç) know the third parties in Türkiye or abroad to whom your data has been transferred,
- (d) request correction if your data is incomplete or inaccurate,
- (e) request deletion or destruction of your data under the conditions of KVKK Art. 7,
- (f) request that actions taken under (d) and (e) be notified to third parties to whom your data was transferred,
- (g) object to a result against you that arises from analysis of your data solely by automated systems,
- (ğ) claim compensation if you suffer damage because your data was processed unlawfully.
9. How to apply
In line with the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in one of these ways:
- in writing, with a handwritten signature, delivered to Türkiye by hand, by post or through a notary,
- by e-mail to info@vesselcall.com from the e-mail address you previously gave us and that is registered in our system,
- by e-mail to info@vesselcall.com, signed with a secure electronic signature or a mobile signature.
Your application must include: your name and, for written applications, your signature; for Turkish citizens the Turkish ID number, for foreign nationals the nationality and passport number or, if any, ID number; your residential or business address for notifications; if any, the e-mail address, phone and fax number for notifications; and the subject of your request. Relevant information and documents should be attached.
We conclude your request as soon as possible according to its nature and within 30 days at the latest, free of charge (KVKK Art. 13). If the action involves an additional cost, a fee under the tariff set by the Personal Data Protection Board may be charged: for written responses, no fee is charged up to ten pages, and 1 Turkish lira may be charged for each additional page; if the response is given on a recording medium such as a CD or flash drive, the fee may not exceed the cost of the medium. If the application results from our error, any fee charged is refunded. We send our response in writing or electronically. We may ask for additional information to confirm that the request comes from you.
10. Complaint to the Personal Data Protection Board
If your application is rejected, you find our response insufficient, or we do not respond in time, you can file a complaint with the Turkish Personal Data Protection Board within 30 days of learning our response and in any case within 60 days of your application date (KVKK Art. 14). You must apply to us first before filing a complaint. The full text of the law (in Turkish) is published on the official Legislation Information System.
This text is for information purposes and may be updated as our services or the law change.