Different data is collected from different user groups on our platform. You can review in detail below which data is collected.
1
Visitor Data
The following data is collected from users who visit the platform without registering: IP address (for geolocation, cached for 24 hours), browser information (User-Agent), pages visited, visit duration, referral source (which site you came from), UTM parameters (for campaign tracking). Visitor data is recorded with a 60-minute rate limit.
2
Registered User Data
The following data is collected from users who create an account: First and last name, email address (for verification), password (stored encrypted with bcrypt), preferred language, package type (Standard/PRO), registration IP address, first visit source (referrer, UTM parameters, landing page), account creation date.
3
Company Data
The following data is collected for PRO members' company profiles: Company name and description, industry information, contact details (phone, email, address), website, logo and profile images, product and service information, year of establishment. This data is publicly displayed on the platform.
4
Your Rights
You have the following rights regarding your data: Request access to your data, request correction, request deletion, restrict processing, request data portability. To exercise these rights, you can contact support@tr2b.com.
5
KVKK - Turkish Personal Data Protection Law (Law No. 6698)
As a platform operating from Turkey, TR2B fully complies with the Personal Data Protection Law No. 6698 (KVKK). As the data controller, we fulfill all obligations defined under this law.
Purpose of Personal Data Processing
Your personal data collected through the TR2B platform is processed for the following purposes:
- Managing your membership registration and account operations
- Ensuring platform security and preventing unauthorized access
- Providing and improving platform services
- Communicating with you regarding your account and platform updates
- Fulfilling legal and regulatory obligations
Transfer of Personal Data
Your personal data is never shared with or sold to third parties. Your data is used solely to ensure the proper functioning and security of the platform. Personal data may only be shared with public authorities upon a legally binding official request, in accordance with applicable legislation.
Method and Legal Basis of Data Collection
Your personal data is collected through the membership registration form, contact forms, and cookies used on the platform. This data is collected electronically and processed in accordance with the legal bases set forth in Articles 5 and 6 of the KVKK, including your explicit consent, the necessity for the performance of a contract, and compliance with legal obligations.
Your Rights Under KVKK (Article 11)
- Right to learn whether your personal data is being processed
- Right to request information about data processing activities
- Right to learn the purpose of processing and whether data is used in accordance with its purpose
- Right to know the third parties to whom personal data is transferred domestically or abroad
- Right to request correction of incomplete or inaccurate data
- Right to request deletion or destruction of personal data under the conditions set forth in Article 7
- Right to request notification of corrections/deletions to third parties to whom data has been transferred
- Right to object to results arising exclusively from automated data analysis
- Right to claim compensation for damages arising from unlawful processing of personal data
Legal Basis for Processing
Your personal data is processed based on your explicit consent, the necessity for the performance of a contract, compliance with legal obligations, and our legitimate interests (KVKK Article 5).
How to Exercise Your Rights
You may submit your requests regarding KVKK rights to support@tr2b.com with your identity verification. We will respond to your request free of charge within 30 days at the latest. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Authority (KVKK Kurumu).
6
GDPR - European General Data Protection Regulation
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK GDPR.
Your Rights Under GDPR
- Right of Access (Article 15) - Obtain a copy of all personal data we hold about you
- Right to Rectification (Article 16) - Correct inaccurate or incomplete personal data
- Right to Erasure / 'Right to Be Forgotten' (Article 17) - Request deletion of your personal data
- Right to Restriction of Processing (Article 18) - Limit how we use your data
- Right to Data Portability (Article 20) - Receive your data in a structured, machine-readable format
- Right to Object (Article 21) - Object to processing based on legitimate interests or direct marketing
- Right Not to Be Subject to Automated Decision-Making (Article 22) - Protection against solely automated decisions that significantly affect you
Legal Basis for Processing (GDPR Article 6)
We process your personal data based on: (a) your consent, (b) performance of a contract, (c) compliance with legal obligations, (d) protection of vital interests, (e) tasks carried out in the public interest, or (f) our legitimate interests, provided they do not override your fundamental rights and freedoms.
International Data Transfers
When personal data is transferred outside the EEA, we ensure adequate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement (GDPR Article 77).
7
United States Privacy Laws
For users located in the United States, we comply with applicable federal and state privacy laws, including the following key regulations:
CCPA / CPRA - California Consumer Privacy Act
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know - What personal information is collected, used, shared, or sold
- Right to Delete - Request deletion of your personal information
- Right to Opt-Out - Opt out of the sale or sharing of personal information
- Right to Correct - Request correction of inaccurate personal information
- Right to Limit Use - Limit the use and disclosure of sensitive personal information
- Right to Non-Discrimination - We will not discriminate against you for exercising your privacy rights
Other U.S. State Privacy Laws
We also comply with the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Texas Data Privacy and Security Act (TDPSA), and other applicable state-level privacy legislation. Residents of these states have similar rights to access, correct, delete, and port their data.
Do Not Sell or Share My Personal Information
TR2B does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. If this practice changes in the future, we will provide a clear opt-out mechanism as required by applicable law.
8
Data Protection Officer & Contact
For all data protection inquiries, requests, or complaints related to KVKK, GDPR, CCPA, or any other privacy regulation, please contact us at: support@tr2b.com. We are committed to responding to all valid requests within 30 days, and we will never charge a fee for processing your data protection request.