1. Identity of the data controller
- The data controller under Turkish Law No. 6698 is Barış Karataş, operating under the Furver brand.
- The contact channel for privacy, personal data, and security matters is support@furver.net.
- This notice covers visitors, members, project and team owners, event organizers and participants, prospective sponsors/supporters, and people submitting support requests.
2. Categories of personal data
- Identity and account data: name, username, age information, country, role, account type, verification, and membership status.
- Contact data: email address, optional phone number, and support correspondence.
- Profile and professional data: profile image, biography, skills, links, social or portfolio URLs, and information made visible by the user.
- Platform content and interactions: projects, files, teams, events, applications, votes, awards, sponsor showcases, posts, comments, likes, favorites, messages, and notifications.
- Transaction data: feature usage, support/reward records and, when relevant features are used, Premium, balance, withdrawal, or payment records. Furver does not intend to retain raw card data; card processing may be handled by an authorized payment provider when payments are enabled.
- Technical and security data: IP address, user agent, browser/device details, session and security tokens, login and transaction times, error and audit logs.
- Cookie and local storage data: browser records for language, theme, accessibility, drafts, and security preferences.
3. Collection methods
- Data is provided directly through registration and profile forms, project/team/event actions, uploads, messages, comments, and support requests.
- IP, session, browser, security, and usage records may be generated automatically when the site is accessed or actions are performed.
- Cookies, localStorage, and sessionStorage may create records when the relevant feature is used or a preference is saved.
4. Processing purposes
- Creating and performing the membership relationship; authenticating identity and managing accounts, profiles, and sessions.
- Providing project, team, event, application, voting, award, comment, messaging, notification, and community features.
- Publishing, ordering, searching, and displaying content according to the user’s visibility choices.
- Preventing spam, fake accounts, fraud, unauthorized access, vote manipulation, and other abuse, and investigating security incidents.
- Resolving support requests, content complaints, account appeals, and legal applications.
- Measuring service performance, correcting technical errors, and improving the Platform using statistics that do not directly identify individuals.
- Meeting legal obligations, responding to competent authorities, and establishing, exercising, or protecting legal rights.
5. Legal grounds
- Data may be processed under Article 5(2) of Law No. 6698 where necessary to establish or perform a contract, comply with legal duties, establish/exercise/protect rights, or pursue legitimate interests without harming fundamental rights.
- Processing expressly required by law relies on the relevant legal duty. Data made public by the user is processed only in a manner compatible with the purpose of publication.
- Where none of these grounds apply, separate and freely given explicit consent will be requested for activities such as marketing or non-essential cookies. Accepting this notice is not explicit consent.
6. Public content and user choices
- Public profiles, projects, teams, events, awards, posts, and comments may be visible to internet users and search engines. Check content for personal or confidential information before publishing.
- Private messages and non-public applications are normally shown only to relevant parties; authorized access may occur for security, support, moderation, or legal reasons.
- Changing visibility limits future display but may not immediately remove search-engine caches, recipient copies, or legally retained records.
7. Recipient categories
- Other users and internet visitors to the extent allowed by your visibility choices.
- Service providers for hosting, backups, email, notifications, security, error tracking, and payments, limited to data needed for their service.
- Courts, law enforcement, regulators, and other competent authorities where required by law, official request, or protection of rights.
- Potential acquirers and advisers under confidentiality if a business transfer or reorganization is considered.
- Personal data is not sold. Commercial electronic communication consent is managed separately where required.
8. International transfers
- Infrastructure used for hosting, email, security, content delivery, or embedded third-party services may be located abroad.
- Where an international transfer is necessary, the applicable mechanism under Article 9 of Law No. 6698 and secondary legislation is used, such as an adequacy decision, appropriate safeguards, a standard contract, or an exceptional transfer condition.
- Opening a third-party link or embedded item may send data directly to that provider; its privacy terms apply separately.
9. Retention, deletion, and anonymization
- Account and service data is retained while the account is active and afterward only for legal duties, limitation periods, disputes, fraud prevention, and security needs.
- Technical logs, sessions, and backups are limited by security needs and reasonable backup cycles. Data is deleted, destroyed, or anonymized when the purpose and legal basis end.
- Deleted public content is removed from active display; backup copies disappear through normal backup cycles. Legally required records may be retained with restricted access.
10. Data security
- Passwords are not stored as plain text. Furver uses appropriate one-way hashing, secure session cookies, CSRF controls, authorization, and transaction logs.
- Access is limited by role and need, with technical validation for uploads and critical actions. No internet system can guarantee absolute security.
- Report suspicious account or data activity to support@furver.net.
11. Sensitive data and children
- Furver does not normally request health, biometric, political opinion, or other sensitive data. Do not place such information in public areas.
- If sensitive data must be processed, the conditions under Article 6 of Law No. 6698 and additional safeguards apply.
- Users under 18 should not create an account without their legal representative’s knowledge and permission. Suspected unauthorized child accounts or data may be reported for review and restriction/deletion.
12. Automated operations
- Vote ranking, recommendations, spam detection, and content ordering may use automated rules. They are not designed to make decisions producing legal effects solely about a user.
- You may object and request human review if you believe a solely automated analysis has produced an adverse result.
13. Your rights under Article 11
- Learn whether your data is processed; request information and access; learn the purpose and whether data is used consistently with that purpose.
- Learn recipients in Türkiye or abroad and request correction of incomplete or inaccurate data.
- Request deletion or destruction under Article 7 and notification of correction/deletion to recipients.
- Object to adverse results from exclusively automated analysis and seek compensation for damage caused by unlawful processing.
14. Applications and contact
- You may send an application from the email registered to your account to support@furver.net with the subject “KVKK Application”. Include your name, account/username, request, and reply contact details.
- Proportionate additional information may be requested to verify identity or authority. Do not send unnecessary third-party data or an unredacted identity document.
- You may also use other methods recognized by law, including written applications, registered electronic mail, secure electronic signature, mobile signature, or a dedicated application system.
- Applications are answered free of charge as soon as possible and within 30 days at the latest. A fee under the Board tariff may apply if the process creates an additional cost.
15. Policy changes
- This notice is updated when processing activities or applicable law changes, and the new date is published on this page.
- Material changes to purposes, legal grounds, or recipients will be communicated through appropriate channels, and new explicit consent will be requested where required.
This notice reflects Furver’s data processing as of June 30, 2026. It will be updated, together with any required consent flows, before new payment, advertising, analytics, or third-party services become available.
