Datenschutzerklärung und KVKK-Informationstext

Letzte Aktualisierung: 18.09.2026

This text has been prepared under the Turkish Personal Data Protection Law no. 6698 ("KVKK") and related legislation to explain clearly how your personal data is processed via onemligunler.com.

1. Data controller

onemligunler.com işletmecisi
You can also submit your requests Kontaktformular via the contact form as well.

2. Which data do we process?

• Identity and contact: full name, e-mail, phone number; optionally birth date, gender, city of residence, place of birth and occupation.
• Account and transaction: password (stored irreversibly hashed), sign-in dates and IP address, notification preferences, language preference.
• Reminder data: the name, relationship, birth or anniversary date, optional e-mail of the people you add, and your notes.
• Invitation data: The name, e-mail and shared birth date of the person you invite with "Ask for birthday".
• Technical data: session cookie, theme and language cookies, delivery logs (which reminder was sent when and via which channel).

Special categories of personal data such as health data or criminal convictions are not processed. In hospital records only the baby's name, gender and birth date and the contact and birthday details of the parent and relatives are processed.

3. For which purpose and on which legal basis?

• Creating your membership, verifying your account and delivering reminders by e-mail/SMS — establishment and performance of the contract (KVKK art. 5/2-c).
• Showing gift suggestions according to the person's gender and age range — legitimate interest (KVKK art. 5/2-f).
• Ensuring security, preventing abuse and spam, keeping records — legitimate interest and legal obligation (KVKK art. 5/2-ç, f).
• Sending information and campaign e-mails — only with your explicit consent; you can withdraw it at any time from your notification preferences (KVKK art. 5/1, Law no. 6563).

4. With whom do we share?

Your data is not sold or shared with third parties for advertising. It is transferred only to suppliers that are necessary for providing the service: hosting, e-mail delivery infrastructure and the SMS provider. These suppliers process data only on our instructions. Data may be shared with legally authorised institutions upon request within the framework of the relevant legislation. If analytics is enabled, Google Analytics collects anonymised usage statistics.

5. How long do we keep it?

• Account and reminder data: for the duration of your membership. When you delete your account all your records are deleted immediately and permanently.
• Unverified accounts: deleted automatically if not verified within 7 days.
• Delivery and security logs: at most 12 months; rate-limit records 24 hours.
• Invitation records: until you delete them; the invited person does not become a member.

6. Your rights (KVKK art. 11)

You have the right to learn whether your personal data is processed, to request information if it is, to learn whether it is used in line with its purpose, to know the third parties to whom it is transferred, to request correction if incomplete or incorrect, to request deletion or destruction, to request that these operations be notified to the recipients, to object to a result against you arising from analysis by automated systems, and to claim compensation if you suffer damage.

To exercise these rights you can apply via the contact form or the e-mail address above. Applications are answered free of charge within 30 days at the latest. You can also edit or delete your profile and reminder data directly from your panel.

7. Cookies

Essential cookies: the session cookie (keeps you signed in) and the language and theme preference cookies. These cookies do not track you personally and do not require consent. Analytics cookies are used only if enabled by the administrator and are anonymous.

8. Security

Passwords are stored with irreversible algorithms; connections are encrypted with SSL/TLS; forms are protected by bot protection, a security code and rate limits; verification links are single-use and time-limited. Authorised access is logged.

9. Children's data

Data of persons under 18 may only be recorded by their parents or legal representatives under their own accounts. In hospital records the parent is informed by the institution and their consent is obtained; the parent can delete these records at any time.

10. Changes

This text is updated when necessary; the current version is always published on this page and important changes are notified to members by e-mail.