The full notice addressed to people in Türkiye is published in Turkish at KVKK aydınlatma metni. This page summarises it.
1. Data controller
For operations in Türkiye the data controller is Timuçin İlmaz (sole proprietorship, Sultanbeyli tax office), who runs Sepivel in Türkiye. Outside Türkiye the controller is SEPIVEL LTD. Merchants using Sepivel are the controllers of their own customers' order data; we process that data on their instructions.
2. Purposes and legal grounds
We process contact, company, account, billing, public seller and security data to answer requests, prepare and perform annual agreements, run the merchant panel, assess service fit from public marketplace information, and keep the service secure. The grounds are performance of a contract (Art. 5/2-c), legal obligation (Art. 5/2-ç), data made public by the data subject (Art. 5/2-d), establishing or defending a right (Art. 5/2-e) and legitimate interest (Art. 5/2-f). Optional analytics and marketing cookies rely on explicit consent (Art. 5/1).
3. Transfers
Data is shared with hosting, database, storage and email providers, payment providers and the bank or payment institution that issues annual-plan payment links, and with authorities where the law requires. Sepivel is established in the United Kingdom and its providers operate outside Türkiye, so data is processed abroad. Ask us which legal safeguard applies to the transfer.
4. Your rights
Under Article 11 you can learn whether your data is processed, request information, learn the purpose and recipients, ask for correction, erasure or destruction, ask that recipients be notified, object to a solely automated outcome against you and claim compensation for unlawful processing. Write to support@sepivel.com. We answer free of charge within 30 days, and you can complain to the Turkish Personal Data Protection Board. Retention periods are in the privacy notice.