KVKK Privacy Notice (Turkish Personal Data Protection Law)

Last updated: 30 October 2026

This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"). It applies to all users, since Warnitor is established in Türkiye. Users in the EEA and UK should also read our GDPR Privacy Policy. In case of conflict, the Turkish version prevails.

1. Data controller

COREALL TEKNOLOJİ TİCARET LİMİTED ŞİRKETİ, GÖZTEPE MAH. TEPEGÖZ SK. IKAR IŞ MERKEZI NO: 1 İÇ KAPI NO: 8 KADIKÖY / İSTANBUL, Türkiye, MERSIS No: 0212096034700001 ("Warnitor"). Contact: [email protected] · Registered email (KEP): [email protected]

2. Personal data processed

Identity and contact: name, email, company name
Customer transactions: plan, billing details, tax number, support requests
Transaction security: IP address, login records, hashed password, device and browser data
Notifications: alert email addresses, Telegram chat ID
Monitoring data: URLs, domains, IP addresses, ports you add and their check results
Uploaded logs: log files you send for AI incident reports
Marketing: email preferences, only with your explicit consent

3. Purposes

Providing the service, alerts and AI reports
Managing accounts, contracts and billing
Ensuring information security and preventing abuse
Answering support requests
Complying with legal obligations and requests of authorities
Product and campaign updates, if you consent

4. Collection method and legal grounds

Data is collected electronically and automatically via the website, app, API, webhooks, forms and cookies.

Legal grounds (KVKK Art. 5(2)):

(c) conclusion or performance of a contract
(ç) compliance with a legal obligation
(e) establishment, exercise or protection of a right
(f) legitimate interest (security, product improvement)

Marketing communications and non-essential cookies rely on your explicit consent (Art. 5(1)).

5. Data we process as a processor

Monitoring targets and uploaded logs may contain personal data of third parties. You are the controller of that data; Warnitor processes it as a processor only on your instructions. Please mask unnecessary personal data before uploading logs.

6. Transfers

Data may be transferred, limited to the purposes above, to:

Hosting and infrastructure provider: Superonline, Türkiye
Email delivery provider: Microsoft, Europe
AI processing provider: Microsoft, Sweden
Payment provider: Paddle, United Kingdom
Telegram (only if you enable Telegram alerts)
Authorised public authorities

Transfers abroad are made under KVKK Art. 9, using appropriate safeguards such as standard contracts notified to the Personal Data Protection Authority where no adequacy decision exists.

7. Retention

Check results and incident history: per plan (Free 1 day, Basic 30 days, Pro and Advanced 365 days)
Uploaded logs: 365 days
Account data: during the contract and 30 days after it ends
Invoices and accounting records: as required by the Turkish Commercial Code and Tax Procedure Law (up to 10 years)

Expired data is deleted, destroyed or anonymised.

8. Your rights (KVKK Art. 11)

Learn whether your data is processed and request information
Learn the purpose of processing and whether data is used accordingly
Know the third parties in Türkiye or abroad to whom data is transferred
Request correction of incomplete or inaccurate data
Request deletion or destruction under Art. 7
Request that corrections and deletions be notified to recipients
Object to a result against you arising solely from automated analysis
Claim compensation for damage caused by unlawful processing

9. How to apply

You may submit requests under the Communiqué on Application Procedures to the Data Controller:

In writing: GÖZTEPE MAH. TEPEGÖZ SK. IKAR IŞ MERKEZI NO: 1 İÇ KAPI NO: 8 KADIKÖY / İSTANBUL
Via KEP, secure electronic signature or mobile signature: [email protected]
From the email address registered in our system: [email protected]

Requests are answered free of charge within 30 days. If the action requires additional cost, the fee set by the Board may apply.

If your request is rejected, the answer is insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board (kvkk.gov.tr) under KVKK Art. 14.

Contact forms use Cloudflare Turnstile to prevent spam. Cloudflare processes browser and network signals for this security check. It is independent of optional analytics and marketing consent; this application does not enable Turnstile pre-clearance cookies.