Purpose and contact
This policy explains how and why personal data is processed in PVPBE.COM services. The platform is at pvpbe.com; privacy enquiries and requests can be sent to destek@pvpbe.com. This is an information notice: visiting the site or reading this policy does not, by itself, constitute consent.
Categories of data processed
Account data includes username, email, selected language, password hash, verification status and transaction timestamps. Security data may include the last login IP, sessions and access logs. Listings, comments, image and video links, advertising ownership, publication dates and link-change requests are also recorded. Ad and outbound clicks are counted numerically. Browser and device information may appear in technical access logs of the server and enabled security providers. Current PVPBE web forms do not collect bank or card details.
Collection methods
Data is collected electronically through registration and login forms, listing and comment fields, administration and customer dashboards, support correspondence, cookies and server logs. If Google sign-in is enabled and you choose it, email, verification and name information supplied by Google may be used for account matching. Do not post unnecessary personal or sensitive information in public fields.
Purposes and legal grounds
Data needed to establish accounts and deliver listing or advertising services may be processed to enter into or perform a contract. Necessary security records may rely on legitimate interests without overriding your fundamental rights; mandatory records and official responses on legal obligations; and dispute records on establishing, exercising or protecting rights. Separate consent is required where no other statutory ground applies. Consent is not bundled with activities unnecessary for the service.
Public content
Published listings, comments and associated usernames can be viewed by visitors and search engines. Profile images and listing details may appear in social sharing previews. Membership alone does not make your email public on listings or comments. Removing a listing or account does not mean third-party cached copies disappear immediately.
Ad measurement and marketing
The current application has no Google Analytics integration or advertising network that tracks users across sites. Aggregate ad-link click counts are stored. If non-essential analytics, ad tracking or marketing tools are introduced, the information will be updated and separate permission requested before activation where required. Continuing to use the site does not replace that permission.
Recipients and service providers
Data may be shared as necessary with hosting and infrastructure providers, authorized support personnel and legally competent authorities. Amazon SES is planned for account emails; when enabled, it processes the recipient address and message content. When enabled, Cloudflare Turnstile performs bot checks, and Google handles Google sign-in if you select it. These providers also have their own data-processing terms. Your personal data is not sold for data trading.
International transfers and external content
International email, security, sign-in or media services may process data outside Türkiye. Applicable conditions and safeguards under Article 9 of the KVKK must be assessed for a transfer; this policy alone is neither transfer consent nor an appropriate safeguard. Loading external images or embedded videos may connect your browser to their provider and transmit technical details such as your IP address. Review destination sites’ terms when following external links.
Data and account security
Passwords are stored as bcrypt hashes, not plain text. Session, authorization and form-security checks are applied. Verification and password-reset links are time-limited and single-use; do not share them. Existing sessions are revoked after a password reset. No internet system can promise absolute security; report suspicious activity to support.
Retention and deletion
Data should be retained only as needed to provide the service, maintain security, protect rights and meet applicable legal obligations. Accounts, published content, ad history and technical logs may have different retention needs. An expired link becoming unusable does not mean its record is physically deleted at that moment. Deletion requests are assessed against ongoing transactions and legal retention requirements; third-party records follow their providers’ processes.
Your rights and requests
Your rights under Article 11 of the KVKK include learning whether and why data is processed; obtaining recipient information; requesting correction and, when conditions apply, deletion or destruction and notification to recipients; objecting to adverse results based solely on automated analysis; and seeking compensation for unlawful processing. Send requests to destek@pvpbe.com identifying the issue and relevant account. Proportionate information may be requested to verify your identity securely; statutory procedures and deadlines remain applicable. Do not email your password.
Children and updates
The platform is not specifically designed for children. Users under 18 should act with their legal representatives for membership and transactions. Report concerns about children’s data or unauthorized disclosures to support. New versions are published with an update date; material changes to processing purposes or providers require the relevant additional information and permission processes.