1. Data Controller
Within the scope of this privacy notice, your personal data is processed by YUEM as the data controller.
2. Purposes of Processing Personal Data
Your collected personal data is processed for the following purposes:
- To enable you to benefit from the Hotspot internet service and to perform user authentication procedures
- To ensure the security of the authentication process
- To keep access logs within the scope of Law No. 5651
- To ensure system security, prevent misuse, and improve service quality
- To fulfill legal obligations
3. Information About SMS Verification
During registration and login procedures, an SMS containing a one-time verification code (OTP) will be sent to you in order to verify your identity.
This SMS is not sent for any advertising, campaign, or marketing purposes and is only carried out to provide the service and ensure security.
4. Processed Personal Data
In this context, the following personal data of yours is processed:
- Identity Information (Name, Surname, etc.)
- Contact Information (Phone number, email address)
- Transaction and Traffic Information (IP address, MAC address, connection logs, date and time information, session records)
5. Transfer of Personal Data
Your personal data may be transferred to the following parties within the scope of the applicable legislation and upon request:
- Authorized public institutions and organizations (courts, prosecutors, BTK and other authorized authorities)
- Legally authorized private individuals and organizations
6. Method and Legal Basis for Collecting Personal Data
Your personal data is collected automatically through the captive portal system in an electronic environment.
Your data is processed based on the following legal reasons;
- To fulfill legal obligations under Law No. 5651 on the Regulation of Broadcasts via the Internet and Prevention of Crimes Committed through Such Broadcasts
- To enable the data controller to fulfill its legal obligation in accordance with Article 5/2-ç of the Personal Data Protection Law (KVKK) No. 6698
hukuki sebeplerine dayanarak işlenmektedir.
7. Retention Period
Traffic and access logs obtained within the scope of Law No. 5651 are kept for at least 2 years, and your personal data will be deleted, destroyed or anonymized in accordance with the legislation if the relevant periods expire.
Other personal data is destroyed in accordance with the relevant legislation when the purpose of processing ceases to exist.
8. Your Rights Under KVKK
Pursuant to Article 11 of the Personal Data Protection Law (KVKK) No. 6698, you have the following rights:
- To learn whether your personal data is processed
- To request information if processed
- To learn the purpose of processing and whether it is used appropriately
- To know the third parties to whom it is transferred domestically or abroad
- To request correction if incomplete or incorrectly processed
- To request deletion or destruction within the framework of the conditions stipulated in KVKK
- To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems
- To request compensation for damages in case you suffer damage due to unlawful processing
9. Application Method
You can submit your requests regarding your rights under KVKK to the data controller via the contact addresses specified above. Your requests will be finalized as soon as possible and within 30 days at the latest, depending on their nature.