Personal Data Protection Notice (KVKK)

Personal data is processed by CosmoHub ("CosmoHub") as data controller within the scope described in this notice.

• Identity information
• Contact information
• Professional experience and CV information
• Visual data
• Content and correspondence shared on the platform
• Transaction security information (IP address, session and system logs)
• Legal transaction information

• Carrying out membership processes
• Providing and improving the platform's services
• Enabling communication between users
• Carrying out information security processes
• Responding to requests and applications
• Meeting legal obligations and providing information to competent authorities

Personal data is processed on the legal grounds set out in Article 5 of the Law: the establishment or performance of a contract, compliance with the data controller's legal obligations, the establishment, exercise or protection of a right, and the data controller's legitimate interests provided that the fundamental rights and freedoms of the data subject are not harmed; and, where necessary, on the basis of explicit consent.

Personal data is collected electronically, by automated or partly automated means, through forms on the platform, uploaded documents, correspondence, cookies and system logs.

Personal data may be transferred, limited to the purposes stated above, to suppliers from whom services are obtained, to other users of the platform in line with the user's preferences, and to competent public authorities.

Because the servers of the infrastructure and cloud service providers used to provide the services are located abroad, personal data may be transferred abroad in accordance with Article 9 of the Law.

Personal data is kept for as long as necessary for the purpose for which it is processed and for the periods required by the applicable legislation; at the end of these periods it is deleted, destroyed or anonymized.

Under Article 11 of the Law, data subjects have the following rights:

• To learn whether their personal data is processed
• To request information about the processing if their personal data has been processed
• To learn the purpose of the processing and whether the data is used in line with that purpose
• To know the third parties in Türkiye or abroad to whom their personal data is transferred
• To request the correction of incomplete or inaccurate personal data
• To request the deletion or destruction of their personal data under the conditions set out in Article 7 of the Law
• To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred
• To object to a result against them arising from the analysis of the processed data exclusively by automated systems
• To claim compensation for damage suffered due to unlawful processing of their personal data

Data subjects can submit their requests regarding their rights under the Law through the form on the Contact page by choosing "Personal data (KVKK) request" as the topic. Applications are concluded free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request; if the action requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.