Pursuant to Law No. 6698 Art. 10
Version: v2.2

KVKK Clarification Text

Official Information Notice Pursuant to Turkish Law No. 6698 on Personal Data Protection

Effective Date: September 22, 2026Last Updated: September 22, 2026Official Legal Notice
This Clarification Text is provided by Batuhan Mutlu (Buluyo) as data controller pursuant to Article 10 of Turkish Law No. 6698 on Protection of Personal Data ("KVKK").

§1. Identity of Data Controller

Data Controller: Batuhan Mutlu (Buluyo Sole Proprietorship)

Address: Yeni Mah. Ahmet Cavus Cad. Taarruz F Blok No: 44 F Ic Kapi No: 1 Kemer / Antalya, Turkey

Tax Office & ID: Kemer V.D. - 6250754182

KEP: batuhan.mutlu@hs01.kep.tr | Email: kvkk@buluyo.app | Phone: +90 850 840 96 39

§2. Categories of Processed Data and Legal Bases

Identity and Contact Data: KVKK Art. 5/2-c (Contract performance) for registration and booking confirmation.

Transaction Data: KVKK Art. 5/2-c for appointment scheduling.

Transaction Security: KVKK Art. 5/2-ç and Law No. 5651.

Location Data: Explicit consent under KVKK Art. 5/1 for map searches.

§3. Data Transfers and Cloud Servers

Databases are hosted in Hetzner Online GmbH (Germany/EU). Push notifications are handled via Google Firebase, email delivery via Mailgun, and web security via Cloudflare under Model 2 Standard Contracts.

Buluyo does not use promotional SMS providers.

§4. Rights of Data Subjects (KVKK Article 11)

You may request information on data processing, rectify inaccuracies, request deletion under Art. 7, object to automated profiling, and claim damages for unlawful processing by contacting kvkk@buluyo.app.

Electronic Storage Notice (ETK Art. 5/1-ç)

Electronic Storage & Record Keeping

This agreement enters into full force upon electronic confirmation and is securely stored in Batuhan Mutlu (Buluyo) digital systems. Users can access this document on the platform at any time or request an electronic copy by emailing destek@buluyo.app.

Polar.sh Merchant of Record & PCI-DSS Protection

Payment, Invoicing & Card Security Commitment (PCI-DSS Level 1 & Polar.sh MoR)

All subscription payments and billing transactions on the Buluyo platform are securely processed by our international Merchant of Record, Polar Software, Inc. (polar.sh), powered by Stripe infrastructure with 256-bit SSL encryption and 3D Secure 2.0. Credit and debit card credentials are never stored or handled on Buluyo servers; invoicing and global tax (VAT/sales tax) compliance are fully managed by Polar.

Polar.sh MoR
PCI-DSS Level 1
256-Bit SSL
3D Secure

Data Controller & Service Provider Identity

Company Trade NameBatuhan Mutlu (Buluyo)
Tax Office & Tax IDKemer Tax Office / 6250754182
KEP Addressbatuhan.mutlu@hs01.kep.tr
Contact Phone & Email+90 850 840 96 39 • destek@buluyo.app
Registered Headquarters AddressYeni Mah. Ahmet Cavus Cad. Taarruz F Blok No: 44 F Ic Kapi No: 1 Kemer / Antalya, Turkey

© 2026 Buluyo. All rights reserved.