Privacy Notice

This notice is provided under Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law” or KVKK), to meet the obligation to inform HUVRA members and users of verification pages about how their personal data is processed, in line with Personal Data Protection Board Decision No. 2026/347 (Kurul Kararı 2026/347). It does not ask for your approval or consent; it only informs you.

1. Identity of the data controller

Legal name: HUVRA
Email: people@huvra.co

2. Personal data processed, purposes and legal grounds

CategoryDataPurposeLegal ground

Identity and contact

Full name, email address

To create a membership, manage the account and communicate with you

Establishment and performance of a contract (Law art. 5/2-c)

Account security

Password hash (your password itself is not stored), optional two-factor authentication key, session records (IP address, browser information, time)

To protect the account and the service against unauthorized access

Legitimate interest (art. 5/2-f)

Work and declaration

Files you upload and their fingerprints, process declaration, tool information, signed declaration, record decision

To create the record, make the certificate verifiable and carry out the review

Establishment and performance of a contract (art. 5/2-c)

Record log

Certificate number, file fingerprint, class, level, decision, time. Contains no name or email

To be able to show that a record has not been altered afterwards

Legitimate interest (art. 5/2-f)

Company membership

Company name, your role, invited email address

To manage the company account and team

Establishment and performance of a contract (art. 5/2-c)

Evidence request

Requester's name, email, organization, case number and reason

To assess the request and keep a record; establishment or defense of a legal claim

Establishment, exercise or protection of a right (art. 5/2-e), legitimate interest (art. 5/2-f)

Notification emails

Email address, message content

To send verification, password reset, invitation and decision notices

Establishment and performance of a contract (art. 5/2-c)

Profile information (optional)

Short description, about text, location, website, social media links, photo, cover image

To keep your profile on your dashboard. Public display is separate and takes place only with your explicit consent in the Explicit Consent Text

Storage: performance of a contract (art. 5/2-c). Public display: explicit consent (art. 5/1)

Your personal data is not processed for advertising, marketing or profiling. No payment details, national identity number or special categories of personal data are requested.

3. Purposes of transfer and recipient groups

Competent public authorities and courts: only where a legal obligation or lawful request exists, and only as far as the request requires.
A party that files an evidence request: if an administrator approves the request with reasons, the file, the declaration and the name and email of the signatory of the relevant work are provided to the requester. This appears on the record owner's dashboard. The purpose is the establishment or defense of a legal claim.
The evaluator or auditor carrying out the review: only the file and declaration of the relevant work, for the review level you chose.
Hosting and email infrastructure providers (data processors): to provide the service technically. If a provider located abroad is used, the conditions in Article 9 of the Law will be met and this notice will be updated beforehand.

Your personal data is not sold and is not transferred to any third party other than those listed above.

4. Method of collecting personal data

Your data is collected electronically from you through membership and dashboard forms, file uploads, and verification and evidence request forms; session information is collected automatically while you use the site. Only cookies that are necessary to sign in and keep the service secure are used; no advertising or analytics cookies are used.

5. Your rights under the Law

You can submit requests about your rights under Article 11 of the Law, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing or by registered electronic mail (KEP), secure electronic signature, mobile signature, or the email address registered in our system, to the addresses below.

Email: people@huvra.co

Last updated: 04.11.2026