Data Subject Application (KVKK)

1. Data Subject Rights (KVKK Art. 11)

Under Article 11 of the Personal Data Protection Law (KVKK) No. 6698, you have the following rights:

1. To learn whether your personal data is being processed
2. To request information if your personal data has been processed
3. To learn the purpose of processing and whether your data is used in accordance with that purpose
4. To know the third parties to whom your personal data is transferred domestically or abroad
5. To request rectification if your personal data has been processed incompletely or inaccurately
6. To request erasure or destruction of your personal data under the conditions set out in Article 7 of the Personal Data Protection Law (KVKK) No. 6698
7. To request notification of rectification and erasure to third parties to whom your personal data was transferred
8. To object to a result against you arising solely from automated analysis of processed data
9. To claim compensation for damages arising from unlawful processing of your personal data

2. Application Method

You may use the following methods to exercise your rights. Your application must include information to verify your identity (full name, registered email address).

Application by Email

Controller contact: destek@gerekli.tr
Subject line: KVKK Data Subject Application — [Request Type]

Applications sent from the email address registered on your gerekli.tr account or to the support address above are preferred.

No physical postal address is currently provided for data subject requests; requests are handled through your registered account email or the support email address.

Identity Verification

• Registered email: Applications sent from the email address registered on your gerekli.tr account are automatically verified.
• Other channels: For applications from a different email address, a copy of your national ID card may be requested for identity verification (with only the last 4 digits of the national ID number visible).

Application Content

Please include the following information in your application:

• Your first and last name
• Your email address registered on gerekli.tr (if any)
• The right you wish to exercise (access request, rectification, erasure, objection, withdrawal of cookie consent, etc.)
• Explanation of your request and any additional information
• Date of application

3. Application Process and Response Time

• Your application will be concluded free of charge within 30 days at the latest. If the process incurs an additional cost, a fee determined by the Personal Data Protection Authority may be charged.
• If your application contains incomplete information, the deadline is suspended until deficiencies are remedied.
• If your application is rejected, the grounds for rejection will be communicated in writing or electronically.
• Information regarding the outcome of your application will be provided in writing or electronically, depending on the nature of your request.

4. In-App Data Management

Some requests can be fulfilled directly within the app:

• Profile editing: Update your name, department, and other profile information from the My Account page
• Delete cloud data: Delete your planning and attendance data on the server via My Account → Delete Cloud Data
• Clear local data: Clear localStorage data from browser settings
• Cookie preferences: Withdraw analytics and performance consent via the Cookie Preferences link in the page footer
• Account deletion: For permanent account deletion, apply to destek@gerekli.tr

5. Complaint to the Personal Data Protection Authority

If your application is rejected, the response is found insufficient, or no response is given within the deadline, you may lodge a complaint with the Personal Data Protection Authority via its website www.kvkk.gov.tr or through the following contact details:

• Authority: Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu)
• Address: Nasuh Akar Mah. 1407. Sok. No:4 06520 Balgat/Çankaya/Ankara
• Web: www.kvkk.gov.tr
• Phone: 0 (312) 216 50 50

6. Data Controller Contact Information

Data Controller: gerekli.tr
Contact: destek@gerekli.tr

No physical postal address is currently provided for data subject requests; requests are handled through your registered account email or the support email address.

For detailed information, see our Privacy Notice (KVKK).