Jurisdiction-specific notice. The Kişisel Verilerin Korunması Kanunu ("KVKK", Law No. 6698) is the data protection law of the Republic of Türkiye. This notice is provided by RYSTAT for Turkish data subjects whose personal data is processed under Turkish jurisdiction. The authoritative version is the Turkish-language document.
1. Authoritative Version
The legally binding KVKK information notice ("Aydınlatma Metni") is published in Turkish at:
/legal/kvkk — KVKK Aydınlatma Metni (Turkish)
If you are a Turkish data subject, please refer to the Turkish version, which is authoritative under Article 10 of Law No. 6698 and the Communiqué on the Procedures and Principles for the Fulfilment of the Obligation to Inform.
2. Summary in English
The KVKK notice covers, in line with Article 10 of Law No. 6698:
- Identity of the data controller: Unifics Limited (Hong Kong), the legal entity behind the RYSTAT brand.
- Categories of personal data processed: identity, contact, customer transaction, transaction security, financial, marketing, legal, customer service.
- Purposes of processing: account management, order fulfilment, billing, tax compliance, customer support, fraud prevention, legal defence, and (with consent) marketing.
- Legal grounds: performance of a contract, legal obligation, establishment/exercise/defence of legal claims, legitimate interests, and explicit consent where required.
- Recipients: domestic infrastructure providers in Türkiye, payment institutions, public authorities, accountants and auditors.
- Cross-border transfers: Hetzner (Germany/Finland), Stripe (Ireland), OnlineNIC (Hong Kong/USA), Sentry (USA/EU), Unifics Limited (Hong Kong) — under standard contractual safeguards or explicit consent.
- Collection method: online forms, customer panel, email, support tickets, payment processors, cookies, and direct correspondence.
- Data subject rights (Article 11): right to know, right to access, right to rectification, right to erasure or anonymisation, right to object to automated decisions, and the right to claim damages.
3. Contact for KVKK Requests
For any KVKK-related request, including requests under Article 11, please contact:
- Email: privacy@rystat.com
Your request must include your name, identification details, contact address, and a clear description of the right you wish to exercise. Responses will be provided within 30 days, in accordance with Article 13(2) of Law No. 6698.
If your KVKK request is not addressed satisfactorily within 30 days, you may file a complaint with the Personal Data Protection Authority (KVKK Kurulu) in accordance with Article 14.
4. Related Documents
- Privacy Policy — GDPR-compliant transparency notice
- Data Processing Agreement (DPA) — for business customers
- Sub-processor List
- Cookie Policy
- Copyright / DMCA Policy