Privacy
Policy

1. Introduction

This Privacy Policy explains how personal data of visitors and users ("user", "you", "your") using the services provided by Vistark ("platform", "we", "our") is collected, processed, and protected. Vistark acts as the data controller within the meaning of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR"). By using our platform, you accept the terms outlined in this policy.

2. Information Collected

3. Purposes and Legal Basis of Processing

We process your data on the following legal bases (KVKK Article 5, GDPR Article 6):

• •Performance of the contract — providing and executing the services you requested
• •Legitimate interests — user verification and security, technical support, and improving user experience
• •Legal obligation — compliance with legal and regulatory obligations
• •Consent — where required, e.g. for non-essential cookies and marketing communications
• •Establishment, exercise or defense of legal claims — statistical analysis and reporting

4. Cookies

Our platform uses cookies to improve the user experience. When you first visit the site, a consent banner asks you to accept or reject non-essential cookies. Your choice is stored in the "vistark-consent" cookie and can be changed at any time from your browser settings. Categories of cookies we use:

• •Strictly necessary cookies — required for the site to function (session, language preference, consent choice). These do not require consent.
• •Analytics cookies — used to measure site usage and performance. Vercel Analytics and Speed Insights are loaded only after you explicitly accept cookies.
• •You can block or delete cookies from your browser settings at any time; some parts of the site may not work as expected without them.

5. Sharing with Third Parties

Your personal data:

• •Is never sold, rented, or leased to third parties.
• •May be shared to a limited extent with our service providers when mandatory for providing the service: hosting and infrastructure (Vercel), payment processing (PayTR), and email delivery.
• •May be disclosed where required by law, court order, or a request of a competent public authority.
• •Service providers process data only on our instructions and are bound by confidentiality and data protection obligations (GDPR Article 28).

6. International Data Transfers

Our hosting and analytics providers may process data on servers located in the European Economic Area, the United States, and Turkey. Where data is transferred outside your country of residence, we rely on adequate safeguards such as the European Commission standard contractual clauses and applicable adequacy decisions (GDPR Articles 44–49).

7. Data Retention Period

Your data is retained as long as your membership is active and for the period required under legal obligations (e.g. tax and accounting retention periods for payment records). Security logs and transaction records are retained for a limited period (up to 12 months) unless a longer legal obligation applies. When membership is canceled or deleted, your data is securely deleted or anonymized.

8. Security

Technical measures such as encryption, firewalls, and access control are implemented to protect the confidentiality of your data. Access to personal data is restricted to authorized personnel only. However, no system on the internet can be guaranteed to be 100% secure. In the event of a personal data breach, we notify the relevant supervisory authority and affected users as required by applicable law (GDPR Article 33–34).

9. Your Rights

Under the KVKK (Article 11) you have the following rights:

• •Learning whether your personal data is processed and, if so, requesting information about it
• •Requesting information about the purposes of processing and whether data is used for those purposes
• •Learning about third parties to whom your data has been transferred, at home or abroad
• •Requesting correction of incomplete or inaccurate data
• •Requesting deletion or destruction of your data within the conditions set out in the law
• •Requesting that corrections or deletions be notified to third parties to whom your data was transferred
• •Objecting to processing that causes a detriment to you as a result of automated analysis
• •Requesting compensation for damage arising from unlawful processing

If you are located in the EEA or the UK, the GDPR also grants you the right to access, rectify, erase (right to be forgotten), restrict, and port your data, as well as the right to object to processing and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority (in Turkey, the KVKK Board). To exercise any of these rights, contact us at info@vistark.net.

10. Changes

Updates to our privacy policy may be made from time to time. The current version is always published on this page, and the "Last Updated" date at the top reflects the most recent revision. If the changes are significant, notification may also be made via email.

11. Contact

For any questions and requests regarding the privacy policy, including KVKK and GDPR inquiries, you can reach us at info@vistark.net or via our contact page. Written applications under the KVKK can be sent to our address: Mehmet Akif Mah. İlkbahar Sk. No:5, 34782 Çekmeköy/İstanbul, Türkiye.