Data Protection Notice (KVKK)
Last updated: April 2026
As PersonaTR (BESA International Certification, Technical Supervision and Control Services), we process your personal data as data controller pursuant to the Law on the Protection of Personal Data No. 6698 ("KVKK") within the scope described below.
1. Data Controller
PersonaTR — BESA International Certification, Technical Supervision and Control Services
Web: personatr.com | E-posta:
info@personatr.com
2. Personal Data Processed
Only the following data is processed within the scope of the certificate verification service:
- Name and surname
- Certificate number
- IP address of the querying device (for security purposes)
3. Purpose of Processing Personal Data
- Verification of training certificates issued by PersonaTR
- Prevention of unauthorized access and misuse (security log)
4. Legal Basis
Certificate verification is carried out based on the legitimate interests of the data controller under KVKK Art. 5/2-f; it is required for the purpose of proving certificate ownership and protecting the reliability of certifications.
5. Retention Period
- Certificate data: certificate validity period + 5 years
- Security (IP) logs: 90 days
6. Transfer of Personal Data
Collected personal data is not shared with third parties except as required by law. However, IP addresses are transmitted in real time to the ip-api.com GeoIP service in order to obtain geographic location statistics (country and city). Only the country code and city are stored as a result; the IP address itself is not retained by the third party. For the privacy policy of ip-api.com, please visit ip-api.com/docs/legal.
7. Your Rights (KVKK Art. 11)
Pursuant to Art. 11 of the KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it is being processed
- To learn the purpose of processing and whether it is being used in accordance with that purpose
- To know the third parties to whom data is transferred, domestically or abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction of personal data within the conditions provided by law
- To object to decisions produced by analysis exclusively through automated systems
- To claim compensation for damages arising from unlawful processing
8. How to Submit a Request
You may submit your requests regarding your rights in writing to info@personatr.com. Your request will be resolved within 30 days at the latest.
