Privacy
Policy.

01How your personal data may be processed

Under Law No. 6698 on the Protection of Personal Data (KVKK), the data you share with Things may be collected, recorded, stored, modified, and reorganized, and processed through automatic or non-automatic methods within our data systems.

02Processing purposes and legal basis

Your data is processed to fulfil the requirements of our services and improve our offerings, to respond to matters of public security and legal disputes as required by regulation, to provide members with opportunities and share information with authorised entities, and to analyse advertising preferences. All processing complies with Law No. 6698 and related regulations.

03Third parties receiving data

Your data may be shared with parent shareholders, advertisers, domestic and international affiliates, member companies using the platform, service providers, and partner organisations necessary for operations. Cookie practices are detailed in the Things Cookie Policy.

04Data collection methods

Personal data is collected via:

• Website and app forms (name, address, phone, email)
• Login credentials and user preferences
• IP records, browser cookies, and navigation duration
• Business communications (CVs, business cards, proposals)
• Indirect sources: websites, social media, surveys, and public databases

05Data obtained before KVKK implementation

Things did not begin operations before the KVKK effective date of 7 April 2016, so no pre-existing personal data is stored.

06Data transfers

Data processed in Turkey or abroad may be transferred to overseas service providers in adequately protected jurisdictions while remaining compliant with KVKK. Data may be shared with business partners, emergency services, regulatory bodies, courts, and commercial entities with an existing relationship.

07Data storage and protection

Things implements security measures including hashing, encryption, transaction logs, access management, and physical safeguards in line with Article 12 of KVKK. Unauthorised access incidents are reported to the relevant authorities.

08Accuracy and currency of data

Under Article 4 of KVKK, Things maintains accurate and current information. Members are responsible for keeping their profiles up to date through the website.

09Data subject rights (KVKK Article 11)

Effective 7 October 2016, you have the right to:

• Learn whether your data is being processed
• Request information about the processing
• Learn the purposes of processing and whether they are used accordingly
• Identify the third parties to whom data is transferred
• Request correction of incomplete or incorrect data
• Request deletion or destruction under Article 7 of KVKK
• Request that corrections be notified to third parties
• Object to results arising exclusively from automated analysis
• Claim compensation for damages due to unlawful processing

10Contact and submission

You can reach us at hello@things.ist. Things responds within 30 days. Requests are generally free; any fees follow the rates set by the Personal Data Protection Board under Article 13 of KVKK. By sharing your data, you consent to the terms of this policy, including data usage, third-party sharing, and communications.