GDPR / KVKK Data Protection Disclosure
Disclosure of personal data processing practices at Followoid under Turkish KVKK Law No. 6698 and UK GDPR.
Last Updated: 22 August 2026
This Disclosure Notice is prepared pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the applicable Communiqué on Principles and Procedures for Fulfilling the Obligation to Inform, as well as UK GDPR Article 13/14 for data subjects in the United Kingdom.
1. Data Controllers
| Turkey | Serkan Kısa (Sole Proprietorship) · Tax No: 5581289828 · Atatürk Mah. Ertuğrul Gazi Sok. Metropol İstanbul Sitesi C1 Blok Kat 25, No:376, Ataşehir / Istanbul, Turkey |
|---|---|
| United Kingdom | Kisa Digital LTD · Companies House: 17087896 · Office 17814, 182-184 High Street North, East Ham, London E6 2JA, United Kingdom |
| info@followoid.com | |
| Phone | +90 850 307 6920 |
2. Categories of Personal Data Processed
| Category | Data |
|---|---|
| Identity | First name, last name, username |
| Contact | Email address, phone number |
| Customer Transaction | Order history, invoice details, payment method |
| Financial | Payment transaction reference, balance movements (card numbers are never stored) |
| Digital Footprint | IP address, cookie data, browser and device information, session logs |
| Support / Complaints | Contents of support ticket communications |
| Target Account Information | Social media username or URL to which the service is applied (may constitute personal data) |
3. Purposes and Legal Bases
| Purpose | KVKK Legal Basis (Art. 5) | UK GDPR Legal Basis |
|---|---|---|
| Forming and performing the membership contract | Art. 5/2(c) – Performance of contract | Art. 6(1)(b) |
| Order processing, delivery, and tracking | Art. 5/2(c) – Performance of contract | Art. 6(1)(b) |
| Payment processing and invoicing | Art. 5/2(ç) – Legal obligation | Art. 6(1)(c) |
| Customer services and complaint management | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
| Fraud prevention and security | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
| Statutory reporting and audit obligations | Art. 5/2(ç) – Legal obligation | Art. 6(1)(c) |
| Sending commercial electronic messages | Art. 5/1 – Explicit consent | Art. 6(1)(a) |
| Platform development and UX analysis | Art. 5/2(f) – Legitimate interest | Art. 6(1)(f) |
4. Transfer of Personal Data
Your personal data may be transferred to the following parties within the framework of KVKK Articles 8 and 9 and UK GDPR Chapter V:
- SMM service suppliers (only target account information and order details)
- Payment service providers (iyzico, PayTR, Stripe, etc.)
- Cloud infrastructure and email service providers
- Competent public authorities when required by legal obligation
5. Retention Periods
Your personal data is retained until the processing purpose ceases to exist or until the maximum retention period prescribed by applicable law expires, after which it is deleted, destroyed, or anonymised.
6. Your Rights under KVKK (Art. 11)
By applying to the data controller, you have the right to:
- Learn whether your personal data is being processed;
- Request information if it is being processed;
- Learn the purpose and whether data is used in line with that purpose;
- Know the third parties to whom data is transferred domestically or abroad;
- Request correction of incomplete or inaccurate data;
- Request deletion or destruction of data under KVKK Art. 7;
- Request that corrections and deletions be notified to third parties to whom data was transferred;
- Object to a result that is to your detriment arising solely from automated analysis of processed data; and
- Claim compensation for damage suffered due to unlawful processing.
7. Your Rights under UK GDPR
If you are in the United Kingdom, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection under UK GDPR Arts. 15–21. You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. How to Submit a Request
Please send your requests, together with identity-verifying documentation, to info@followoid.com or to our address above. Requests will be concluded within 30 days. Where processing entails an additional cost, a fee may be charged in accordance with the tariff set by the relevant data protection authority.