KVKK Disclosure
The notice required by Turkish data protection law: what is processed, on what grounds, and who it is transferred to.
Last updated Sep 14, 2026
What this notice is
Turkish Law no. 6698 on the Protection of Personal Data (KVKK) requires whoever processes your personal data to inform you about that processing. This page is that notice. A detailed breakdown of the data processed is in the Privacy Policy, and what is stored in your browser is in the Cookie Policy.
Data controller
The party operating the TattooVerseCo platform is the data controller for the processing described here.
Categories of personal data
- Identity and contact: name or business name, username, email address, and — on studio and supplier profiles — a phone number and address.
- Professional information: years of experience, styles worked in, portfolio images, job listings and applications.
- Location: city and country; for studios and suppliers, coordinates derived from the address.
- Request data: placement, size, style and colour preferences, budget range, free-text descriptions, reference images and — where uploaded — a photograph of the area to be tattooed, together with the optional skin tone value.
- Transaction security: server logs containing IP address and browser information.
- Analytics: where consented to, the addresses of the pages you visit and the cookies Google Analytics sets.
- Marketing: the separate opt-in you give for commercial electronic messages and — if you accepted them — marketing cookies, together with the email address and phone number transferred to Meta in hashed form for advertising measurement.
Purposes of processing
- Creating your membership record and keeping you signed in.
- Publishing profiles, requests and listings on the platform, and connecting clients with artists and studios.
- Running the quote, booking and messaging flows, and sending transactional notifications including appointment reminders.
- Where separately consented to, sending commercial electronic messages and measuring advertising performance.
- Maintaining information security, detecting abuse and fixing faults.
Method of collection and legal grounds
Your personal data is collected electronically, through the forms you fill in and the actions you take while using the platform.
Recipients
Your data is transferred, to the extent needed to provide the service, to the providers we use for hosting, database, file storage and email delivery. If you accepted marketing cookies, data is also transferred to Meta for advertising measurement; that transfer covers the address of the page visited and the hashed form of the email address and phone number typed into the fields on the sign-in and sign-up pages. The list of providers is in the Privacy Policy. Data may also be transferred to competent public authorities where a legal obligation arises.
Your rights
The law grants you a set of rights over your personal data, which you may exercise by applying to the data controller. You can send your application through the channel below.