Legal Notice

PERSONAL DATA PROTECTION NOTICE

Under Turkish Law no. 6698 on the Protection of Personal Data | Version 1.2 | 15.10.2026

Please note: The binding version of this document is the Turkish one. This translation is provided for information only; in case of any discrepancy, the Turkish text prevails.

01. DATA CONTROLLER

This notice has been prepared under Turkish Law no. 6698 on the Protection of Personal Data ("KVKK") for the turonay.com platform operated by Akolya Limited (company no. 17028511, Office 17388, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom). The Platform acts as the "data controller" in processing your personal data.

02. PERSONAL DATA PROCESSED

Following the principle of data minimisation, the Platform processes only the personal data that is strictly necessary to deliver the service:

Identity and Contact
  • Email address
  • Username
  • A national ID number or phone number is never requested
Technical and Security
  • IP address and access logs
  • Browser type and device information
  • Session timestamps (required by Turkish Law no. 5651)
Financial Data
  • Transaction ID and payment amount
  • Payment method type
  • Card numbers and CVC codes are not stored on our servers
Service Usage
  • The service purchased
  • The virtual number assigned
  • Order and transaction history

03. PURPOSES AND LEGAL BASIS OF PROCESSING

Membership and Service Delivery

Creating and verifying the account and technically delivering the virtual number / SMS verification service.

Performance of contract (KVKK art. 5/2-c)

Payment Operations

Topping up balance, creating orders and recording financial transactions.

Performance of contract (KVKK art. 5/2-c)

Legal Obligations

Retaining access logs under Turkish Law no. 5651 and responding to official requests.

Legal obligation (KVKK art. 5/2-ç)

Security and Fraud Prevention

Detecting suspicious sign-ins and preventing account compromise and unauthorised access.

Legitimate interest (KVKK art. 5/2-f)

Customer Support

Managing and resolving your support requests.

Performance of contract (KVKK art. 5/2-c)

04. TRANSFER OF DATA

As a rule, the Platform does not share user data with third parties. Transfers occur only in the following necessary cases:

Public Authorities

In the scope of a criminal investigation, the relevant log data is shared upon official written requests from courts, prosecutors or law enforcement.

Payment Providers

Payment providers process only the financial data necessary to complete the transaction. They are subject to their own GDPR / PCI-DSS policies.

Infrastructure / Hosting Providers

Server providers operate the systems where your data is stored as part of the technical infrastructure. This transfer is necessary to deliver the service.

05. DATA RETENTION PERIODS

Account and membership data

While the account is active + 3 years

Financial transaction records

10 years (Turkish Commercial Code art. 82)

Access logs (Law no. 5651)

2 years

Support request records

3 years

Payment provider transaction records

Per the provider's policy

Marketing consent data

Until consent is withdrawn

06. YOUR RIGHTS UNDER KVKK

Under Article 11 of the KVKK you have the following rights:

To learn whether your personal data is being processed
To request information if it has been processed
To learn the purpose of processing and whether the data is used accordingly
To know the third parties to whom data is transferred domestically or abroad
To request correction of incomplete or inaccurate data
To request erasure or destruction when the purpose no longer exists
To request that corrections and erasures be notified to third parties
To object to a result against you arising solely from automated analysis
To claim compensation for damage suffered due to unlawful processing

07. HOW TO APPLY

You can use the channels below to exercise your rights under the KVKK. Requests are answered within 30 days:

Support Form info@turonay.com

© 2026 Akolya Limited. All rights reserved.

Last updated: 15.10.2026