KVKK Information Notice

• Onuralp Başar
• Address: Türkiye
• E-mail: privacy@movsight.com
• Web: https://movsight.com

• Identity: username, display name, birth year
• Contact: e-mail address
• Visual record: profile photo (if you upload one)
• Customer transaction: journal notes, quotes, ratings, viewing dates, follow relationships, Terms acceptance records
• Transaction security: IP address, server logs, session data, password hash

We do not process special categories of personal data (KVKK Art. 6). We recommend not writing such information in your journal notes.

• Creating and managing your account
• Providing the personal cinema journal, follow and feed services
• Sending sign-in link, verification and password-reset e-mails
• Information security; preventing and detecting abuse
• Meeting legal obligations and protecting rights
• Only with your explicit consent: playing trailers on the site via YouTube

Your data is collected electronically, by fully or partly automated means: through the sign-up and profile forms, Google sign-in (if you choose it), and server logs and strictly necessary cookies while you use the service.

• KVKK Art. 5(2)(c): necessary for concluding or performing a contract (account, journal, follow and e-mail services)
• KVKK Art. 5(2)(ç): compliance with a legal obligation of the controller (acceptance records, statutory notifications)
• KVKK Art. 5(2)(e): establishing, exercising or protecting a right (evidence in disputes)
• KVKK Art. 5(2)(f): legitimate interest of the controller, provided your fundamental rights are not harmed (security logs)
• KVKK Art. 5(1): explicit consent (only for external media such as YouTube; withdraw it any time in the cookie settings)

Transfer abroad (KVKK Art. 9): To provide the service, your data is transferred to the following providers, which act as our data processors:

• Hetzner Online GmbH (Germany): server hosting
• Supabase, Inc.: database, authentication and file storage (Japan, Tokyo (ap-northeast-1))
• Resend, Inc. (USA): sending account e-mails

These transfers rely on the standard contracts published by the Personal Data Protection Board, one of the appropriate safeguards under KVKK Art. 9(4). Signed standard contracts are notified to the Personal Data Protection Authority within 5 business days (KVKK Art. 9(5)).

Domestic transfer: your data is transferred to competent public authorities only where a legal obligation requires it (KVKK Art. 8(2)(a), Art. 28).

If you choose Google sign-in, or play a YouTube trailer with your explicit consent, Google acts as an independent controller under its own policy.

By applying to the controller you may:

• learn whether your personal data is processed
• request information about it if it is
• learn the purpose of processing and whether it is used accordingly
• know the third parties in Turkey or abroad to whom it is transferred
• request correction if it is incomplete or inaccurate
• request erasure or destruction under the conditions of KVKK Art. 7
• request that correction, erasure or destruction be notified to recipients
• object to an outcome against you resulting solely from automated analysis
• claim compensation for damage caused by unlawful processing

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request in Turkish stating your name, (for Turkish citizens) national ID number, address or e-mail for notification, and the subject:

• by e-mail to privacy@movsight.com from the e-mail address registered to your account, or
• by signed letter sent by post (e-mail us first to receive our postal address)

We conclude your request free of charge within 30 days at the latest. If the action entails an additional cost, the fee set by the Board may be charged (KVKK Art. 13). If your request is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board (KVKK Art. 14).

You can also download all your data or delete your account yourself on the Settings page.