At alpyapi.com, we place the utmost importance on the security of your personal data. Your personal data is processed and stored in accordance with the Turkish Personal Data Protection Law No. 6698 (“Law No. 6698”).

How Your Personal Data May Be Processed

In accordance with Law No. 6698, the personal data you share with alpyapi.com may be fully or partially obtained, recorded, stored, modified, reorganized, and otherwise processed by automated means or non-automated means, provided that they form part of a data recording system. Under the Law, any action taken on data is considered “processing of personal data.”

Purposes and Legal Grounds for Processing Your Personal Data

Your personal data may be processed for the following purposes:

• To fulfill the requirements of our services and to comply with contractual and technological obligations;
• To provide information to public authorities upon request and where required by law, especially in matters related to public safety and legal disputes;
• To offer our members various opportunities or to share such opportunities within legal limits with third parties;
• To analyze advertising preferences. All data is processed in accordance with the Personal Data Protection Law and relevant secondary regulations.

Third Parties to Whom Your Data May Be Transferred

Your personal data shared with alpyapi.com may be transferred—within the scope of the above purposes—to:

• Our main shareholders, affiliates (domestic and abroad), advertisers, service providers, and business partners;
• Member firms using the alpyapi.com infrastructure;
• Other relevant persons and institutions directly related to the services provided;
• Third parties we collaborate with or receive services from as Data Processors.

Regulations regarding cookies used for advertising purposes are provided in the “alpyapi.com Cookie Policy,” which forms part of this Privacy Policy.

How Personal Data Is Collected

Your personal data may be collected via:

• Forms on alpyapi.com websites and mobile applications, including information such as name, surname, address, phone number, email, IP logs of transactions, cookie data collected via browser, browsing time and details, and location data;
• Physical or digital communication channels (e.g., business cards, CVs, proposals, verbal or written communications);
• Indirectly through micro websites, blogs, competitions, surveys, games, campaigns, social media platforms, public databases, and other accessible sources.

Personal Data Obtained Before the Law Came into Force

Since alpyapi.com was established after the effective date of the Law (April 7, 2016), we do not hold any personal data collected before this date.

Transfer of Personal Data Abroad

Your data, collected by any of the above-mentioned means, may be transferred abroad to data processors in countries accredited by the Turkish Personal Data Protection Authority (that ensure adequate protection) for purposes consistent with contractual obligations and the Law.
Data may be shared with:

• Our business partners and service providers;
• Authorized authorities in emergencies;
• Regulatory and supervisory institutions, courts, enforcement offices, and other public institutions authorized to request such data;
• Legal entities we have commercial relationships with and who possess your contact details.

Storage and Protection of Personal Data

alpyapi.com is obligated under Article 12 of the Law to take necessary technical and physical security measures—including encryption, access control, and audit logging—to prevent unlawful processing of and access to personal data. In the event of unlawful access or data breaches, the situation will be reported to the Turkish Personal Data Protection Authority in writing in accordance with legal regulations.

Accuracy and Updating of Personal Data

Under Article 4 of the Law, alpyapi.com is responsible for keeping your personal data accurate and up to date. Therefore, users are expected to update their data via the website or mobile app or share accurate information directly.

Rights of Data Subjects Under the Law

By applying to alpyapi.com, you, as a data subject, may exercise the following rights:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of data processing and whether it is used accordingly,
• Know the third parties (in Turkey or abroad) to whom personal data is transferred,
• Request correction of incomplete or incorrect data,
• Request deletion or destruction of personal data under the conditions set forth in Article 7,
• Request notification of the actions taken to third parties,
• Object to any outcome against yourself resulting from automatic data analysis,
• Request compensation for damages due to unlawful processing of personal data.

Contact and Application

The appointed Data Controller Representative will be announced on our website and registered in the Data Controllers Registry once the legal infrastructure is established.

For any questions, comments, or requests, you may contact: alpyapi@alpyapi.com alpyapi.com will respond to your requests within 30 days, either in writing or electronically. As a general rule, responses are free of charge. However, if the process involves additional costs, alpyapi.com reserves the right to charge fees as specified by the Turkish Personal Data Protection Authority in accordance with Article 13 of the Law.

By sharing your personal data on our website, mobile applications, or other channels, you hereby declare your explicit consent —defined under the Law as informed, specific, and freely given consent—to the processing, transfer, and usage of your personal data as set forth in this Privacy Policy. This includes the use of your data on our digital platforms, notifications, and limited commercial sharing with third parties for user benefit.

Last Updated: 30/07/2025