Data Controller: Bilgi Uzmanları E İş Çözümleri Ltd. Şti.

This notice is prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR") to inform Berekly platform users about the processing of their personal data.

1. Data Controller Identity

Company Name: Bilgi Uzmanları E İş Çözümleri Ltd. Şti.

Trade Name: Knowledge Experts (KXP)

Address: Sıtma Pınar Sokak No:3 Kozyatağı Kadıköy - Istanbul, Turkey

Phone: +90 216 372 63 12

Web: https://kxp.biz

2. Personal Data We Process

2.1 Platform Users (Organization Staff)

Data Category	Data Types
Identity Data	Name, surname
Contact Data	Email address, phone number
Professional Data	Title, department, organization name
Digital Identity	Username, password (hashed)
Security Data	IP address, session data, log records

2.2 Beneficiaries (Recorded by Organizations)

Data Category	Data Types
Identity Data	Name, surname, National ID
Contact Data	Phone number, address
Demographic Data	Family structure, category
Transaction Data	Point usage, distribution history

Important Note: Personal data of beneficiaries is entered by organizations using the platform. Organizations are separate data controllers for this data. KXP acts as a data processor for such data.

3. Legal Basis for Processing

GDPR Article 6(1)(b) — Contract Performance:

Creating and managing your Platform account
Providing services
Technical support

GDPR Article 6(1)(c) — Legal Obligation:

Compliance with legal regulations
Tax and accounting requirements

GDPR Article 6(1)(f) — Legitimate Interests:

Platform security
Service improvement
Statistical analysis

4. Data Transfers

Recipient	Purpose	Legal Basis
Hosting Providers	Platform operation	Contract
Email Service Providers	Notifications	Contract
Payment Processors	Payment handling	Contract
Public Authorities	Legal requirements	Legal obligation
Legal Advisors	Legal consultation	Legitimate interest

International Transfers

For users outside Turkey, data may be transferred to Turkey. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) for EU/EEA users.

5. Your Rights

Under GDPR (EU/EEA Residents)

Right of Access (Art. 15)
Right to Rectification (Art. 16)
Right to Erasure (Art. 17)
Right to Restriction (Art. 18)
Right to Data Portability (Art. 20)
Right to Object (Art. 21)
Right to Withdraw Consent (Art. 7)

Under KVKK (Turkish Residents)

Similar rights under Article 11 of KVKK.

6. How to Exercise Your Rights

Bilgi Uzmanları E İş Çözümleri Ltd. Şti.

Sıtma Pınar Sokak No:3

Kozyatağı Kadıköy - Istanbul, Turkey

For EU Residents: You may also lodge a complaint with your local supervisory authority.

We will respond to your request within 30 days (or one month under GDPR).

7. Data Security

SSL/TLS encryption
Firewall systems
Penetration testing
Access logging
Data backup systems
Employee confidentiality agreements
Regular audits

8. Changes

This notice may be updated when necessary. Updates will be published on this page and significant changes will be notified separately.

Data Protection Notice