Privacy Policy
Learn how we protect your personal data
1. Overview
Benim Plaka ("Platform", "we") places great importance on the privacy of our users. This Privacy Policy has been prepared in compliance with the Turkish Personal Data Protection Law (KVKK No. 6698), the European Union General Data Protection Regulation (GDPR), and other applicable international data protection legislation.
By using the Platform, you acknowledge that you have read and accepted this policy.
2. Data We Collect
We collect and process the following personal data:
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity | Name, surname, username, email | Contract performance |
| Vehicle | License plate, brand, model, color | Contract performance |
| Profile | Profile photo, biography | Consent |
| Communication | Messages, notifications | Contract performance |
| Usage | IP address, browser type, access logs | Legitimate interest |
| Cookies | Session cookies, preference cookies | Consent / Legitimate interest |
3. How We Use Your Data
- Account creation and authentication
- Providing platform services (messaging, meetups, vehicle listings)
- Security and fraud prevention
- Platform improvement and statistical analysis
- Compliance with legal obligations
- Responding to user support requests
4. Data Sharing
We do not share your personal data with any third party except in the following circumstances:
- Legal obligation: Court orders or requests from authorized authorities
- Service providers: Hosting, email, analytics partners (under data processing agreements)
- Security: Fraud prevention, abuse, or protection of legal rights
We never sell your data to third parties for advertising purposes.
5. Cookies
Our platform uses the following types of cookies:
- Essential cookies: Session management and security (bp.sid)
- Preference cookies: Theme and language selection
You can manage cookies through your browser settings; however, disabling essential cookies may affect platform functionality.
6. Data Retention
Your personal data is retained only for as long as necessary for the purpose of collection. Upon account deletion, your data will be permanently removed within 30 days, except where retention is required by law.
7. Security Measures
Encryption
HTTPS/TLS for transmission, bcrypt for password hashing
Access Control
Authorization-based data access
XSS / CSRF Protection
Input sanitization and token validation
Rate Limiting
Request throttling to prevent abuse
8. Your Rights
Under KVKK Article 11 and GDPR Articles 15-22, you have the following rights:
- Right to access your data
- Right to rectification of inaccurate data
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object to automated decisions
To exercise these rights, please contact us or email info@benimplaka.com.
9. Children's Privacy
Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. Parents or guardians who discover such a situation are encouraged to contact us immediately.
10. International Data Transfers
Your data is hosted in Turkey. When international data transfer is required, adequate protection mechanisms (Standard Contractual Clauses, etc.) as prescribed by KVKK and GDPR are applied.
11. Policy Changes
This privacy policy may be updated from time to time. Users will be notified of significant changes through the platform or via email.