Data Protection Notice (KVKK)

This notice is issued by Müşterify as data controller under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). Turkish law applies to our operations in Türkiye; where you reside in the European Union, the corresponding GDPR provisions are noted alongside. Anyone who accesses the site or starts using our products and services is deemed to have read this notice. For fuller detail see our Privacy Policy.

Identity of the controller

Controller: Müşterify. Contact: info@musterify.com

For the customer, patient and client records that a business enters into the platform, the CONTROLLER is that business; Müşterify acts as a processor for such data.

Categories of personal data processed

Identity: first name, last name.

Contact: email address, phone number.

Customer transactions: requests and complaints, appointment details.

Transaction security: IP address, session records, audit logs, password hash.

Marketing: cookie and preference data, where you have given explicit consent.

Purposes of processing

Responding to your requests and conducting correspondence.

Forming and performing the service agreement.

Ensuring account security and system integrity.

Measuring and improving service quality.

Meeting legal obligations.

Legal grounds

Your data is processed under Article 5/2 of the KVKK on the grounds of formation and performance of a contract, compliance with a legal obligation, and the legitimate interests of the controller; and, for non-essential cookies and marketing messages, under Article 5/1 on the basis of your explicit consent.

The equivalent GDPR grounds are Article 6(1)(b), (c), (f) and (a) respectively.

Method of collection

Data is collected by partly automated means through forms on the website, records you create in the platform, email correspondence, and technical logs generated automatically by the system.

Transfers

Data may be transferred to the cloud infrastructure, hosting and email providers we work with to deliver the service, and to measurement providers (Google Analytics 4 and Google Tag Manager, on marketing pages only and subject to your cookie choice), and to competent public authorities where a legal obligation applies.

Our database is hosted within the European Union, in Germany. Cross-border transfers are made in accordance with Article 9 of the KVKK and Chapter V of the GDPR.

Retention periods

Retention periods are listed by category in our Privacy Policy. At the end of the period, data is deleted, destroyed or anonymised.

Your rights under Article 11

You have the right to learn whether your personal data is processed; to request information if it has been; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it is incomplete or inaccurate; to request erasure or destruction; to request that such corrections and erasures be notified to the third parties concerned; to object to a result against you produced solely by automated analysis; and to claim compensation for damage caused by unlawful processing.

Send your application to info@musterify.com; it is concluded within 30 days at the latest. If you are not satisfied with the outcome you may complain to the Personal Data Protection Board, or, if you reside in the European Union, to your national data protection authority.