PDPL Disclosure Statement

Prepared under Article 10 of Law No. 6698 · Last updated: 4 August 2026

This statement explains how Braindpower processes personal data under the Turkish Personal Data Protection Law No. 6698 ("PDPL", known locally as KVKK) and what rights you hold as a data subject.

Data Controller

The data controller is Braindpower, registered in İstanbul, Türkiye and reachable at hello@braindpower.com. Requests may also be delivered through the contact channels published on our contact page.

Personal Data We Process

• Identity data: name and surname, and job title where you provide it.
• Contact data: business e-mail address, telephone number, and company name.
• Customer transaction data: your requests, complaints, and correspondence with us.
• Transaction security data: IP address, log records, session information, and access times.
• Marketing data: your preferences, campaign responses, and cookie choices.
• Finance data: invoicing details for subscribers.

Purposes of Processing

• Carrying out the sales, marketing, and after-sales processes for our products and services.
• Fulfilling contractual and pre-contractual obligations towards you or your employer.
• Ensuring the security of our information systems and physical and digital assets.
• Conducting communication activities and responding to your requests and complaints.
• Meeting obligations arising from legislation and responding to requests from authorised public institutions.

Legal Grounds Under the PDPL

We rely on Article 5/2(c) where processing is directly related to the conclusion or performance of a contract, on Article 5/2(ç) where it is mandatory for compliance with a legal obligation, on Article 5/2(e) for the establishment or protection of a right, and on Article 5/2(f) where processing is necessary for our legitimate interests provided your fundamental rights are not harmed. Where none of these applies — commercial electronic messages and non-essential cookies in particular — we rely on your explicit consent under Article 5/1.

Method of Collection

Personal data is collected by automated and non-automated means through the forms on our website, cookies and similar tracking technologies, e-mail and telephone correspondence, the platform's own interfaces, and events and meetings you attend.

Transfer of Personal Data

Within the grounds listed above, personal data may be transferred to our business partners, suppliers, and group companies, to our hosting, analytics, and e-mail service providers, to our professional advisers, and to authorised public institutions where legislation requires. Transfers abroad are made under Article 9 of the PDPL, based on an adequacy decision, a commitment letter approved by the Board, standard contracts notified to the Authority, or your explicit consent.

Your Rights Under Article 11

• To learn whether your personal data is being processed and to request information about it.
• To learn the purpose of processing and whether the data is used in line with that purpose.
• To know the third parties to whom your data is transferred, in Türkiye or abroad.
• To request correction of incomplete or inaccurate data, and notification of that correction to third parties.
• To request erasure or destruction of your data where the grounds for processing no longer exist.
• To object to a result reached solely through automated analysis that works to your detriment.
• To claim compensation for damage arising from unlawful processing.

How to Exercise Your Rights

Submit your request in Turkish or English, with the information required by the Communiqué on Application Procedures, by e-mail to hello@braindpower.com from the address registered in our systems, in writing to our registered address with a wet signature, or through a registered electronic mail (KEP) address. We may ask for additional information to verify your identity.

Response Time and Fees

We answer within thirty days of receiving your request, free of charge. Where the response requires a separate cost, we may charge the tariff set by the Personal Data Protection Board. If you are not satisfied with the outcome, you may file a complaint with the Board within the periods set out in Article 14.

Changes to This Disclosure

This statement is reviewed as our processing activities and the legislation change. The current version is always the one published on this page, together with the date it took effect.