Data Protection Notice (KVKK)

This disclosure notice has been prepared by Müşterify as data controller under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK"). For persons residing in the European Union, the corresponding GDPR provisions are also indicated.

Persons who access our site, visit the site and/or start using our products and services are deemed to have read this notice. For fuller explanations please see the Privacy Policy page.

Identity of the controller

Controller: Müşterify. Contact: info@musterify.com

For the customer, patient and client records that businesses using the panel enter into the system, the controller is the relevant business; Müşterify acts as a processor for such data.

Categories of personal data processed

• Identity: first name, last name
• Contact: e-mail address, telephone number
• Customer transactions: request and complaint records, appointment details
• Transaction security: IP address, session records, audit logs, password hash
• Marketing: for advertising measurement, the page viewed and a cookie identifier that distinguishes the browser (Meta pixel, based on legitimate interests); and, where you have given explicit consent, analytics cookie and preference data

Special categories of personal data (KVKK Article 6) are present in the system only to the extent they are entered by the business using the panel. For such data the controller is the relevant business; Müşterify processes it only to provide the service, on the business's instructions and under additional security measures. Müşterify does not collect special categories of data in its own capacity as a controller.

Purposes of processing

• Responding to your requests and conducting communication
• Forming and performing the service agreement
• Ensuring account security and system integrity
• Measuring and improving service quality
• Measuring the performance of our own advertising
• Meeting legal obligations

Legal grounds

Your data is processed under Article 5/2 of the KVKK on the grounds of the formation and performance of a contract, compliance with a legal obligation and the legitimate interests of the controller; and, for analytics cookies and marketing messages, under Article 5/1 on the basis of your explicit consent.

Advertising measurement (Meta pixel) on our marketing pages rests on our legitimate interest in seeing the return on our own advertising spend, and runs independently of your choice in the cookie banner. If you disagree with this assessment, you may object to the measurement, block the pixel in your browser, or write to info@musterify.com; how to block it is set out on the Cookie Policy page.

Method of collection

Data is collected, partly by automated means, through forms on the website, records you create in the panel, e-mail correspondence and technical logs generated automatically by the system.

Transfers

Data may be transferred to the cloud infrastructure, hosting and e-mail providers we work with to deliver the service; to measurement providers (Google Analytics 4 and Google Tag Manager, on marketing pages only and subject to your cookie choice); to the advertising measurement provider (Meta Platforms Ireland Limited, on marketing pages only and independently of your cookie choice); and, where a legal obligation applies, to competent public bodies and institutions. Our database is hosted within the European Union, in Germany. Cross-border transfers are made in accordance with the conditions in Article 9 of the KVKK.

Anonymous visit statistics (out of scope)

Our marketing pages include an anonymous visit counter running on our own server. It sets no cookies and stores no IP address, no city-level location and no identifier that could be used to recognise a visitor across visits. Because records are kept as daily per-page totals rather than as individual visits, they cannot be traced back to any single person. In this respect no personal data within the meaning of the KVKK is processed and the counter falls outside the scope of this notice; it is presented here for your information, in the interest of transparency. The data is not transferred to any third party.

Retention periods

Retention periods are listed by category on the Privacy Policy page. At the end of the period, data is deleted, destroyed or anonymised.

Your rights under KVKK Article 11

You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in accordance with that purpose; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it is incomplete or inaccurate; to request its erasure or destruction; to request that the correction, erasure and destruction operations be notified to the third parties to whom the data has been transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation for damage if you suffer harm due to unlawful processing.

You may send your application to info@musterify.com; it is concluded within 30 days at the latest.

Under the Communiqué on the Procedures and Principles of Applications to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ), your application must contain the following information: your first name and last name; your Turkish Republic identity number if you are a citizen of the Republic of Türkiye (otherwise your nationality and your passport or identity number); your residence or workplace address for notification purposes; your e-mail address for notification purposes, if any, and your telephone and fax numbers; and the subject of your request. A wet signature is required for written applications; for electronic applications, a registered electronic mail account, a secure electronic signature or an e-mail address previously notified to our system may be used. We may request additional information to verify your identity. If you are not satisfied with the outcome, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).