KVKK Disclosure Notice (Personal Data Processing)

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). It explains which personal data omnvert.com ("Omnvert") processes, for which purposes and on which legal grounds, to whom it is transferred, and your rights under KVKK Article 11. It applies alongside our Privacy Policy and Cookies Policy.

1) Data controller

Controller: Kaan Tokali (independent developer) — the natural person operating Omnvert.
Location: Türkiye.
Contact: kaantokali1@gmail.com

2) Categories of personal data processed

• Uploaded files: For server-side tools (PDF/Office conversion, OCR, audio processing, packet analysis), your files are processed transiently, only to perform the operation you requested. File contents may include personal data; we do not read, profile, or share them.
• Transaction-security data: IP address, browser information (user-agent), request timestamps (server logs).
• Cookie data: consent state, Google Analytics measurement data, Google AdSense advertising cookies (see the Cookies Policy).
• Contact data: name, e-mail address and message content if you e-mail us.
• Review data: nickname and review text if you leave a tool review (moderated before publication).

3) Purposes of processing

• Providing the conversion/analysis service you request,
• Keeping the service secure and preventing abuse,
• Measuring aggregate (anonymized) usage,
• Funding the free service through advertising (Google AdSense),
• Responding to your inquiries and meeting legal obligations.

4) Legal grounds (KVKK Art. 5)

• Art. 5/2-c — performance of a contract: processing your files for the requested operation.
• Art. 5/2-f — legitimate interest: security logs, abuse prevention, strictly necessary cookies.
• Art. 5/1 — explicit consent: in regions where the consent banner is shown (EU/EEA, UK, Switzerland), consent for analytics and advertising cookies is collected via the banner and can be withdrawn via the "Cookie settings" footer link. Users in Türkiye can turn off ad personalization at Google Ads Settings (adssettings.google.com) and manage cookies from their browser settings.
• Art. 5/2-ç — legal obligation: statutory retention and notification duties.

5) Recipients and international transfers (KVKK Art. 8-9)

• Google (AdSense and Analytics): for ad serving and aggregate measurement; its servers may be located abroad. Transfers rely on KVKK Art. 9 conditions and your explicit consent (cookie banner).
• Grow.me (Mediavine): optional engagement widget; loads only after consent in consent-required regions.
• Hosting / CDN infrastructure: processes network-level data (IP, requests) on our behalf to run the site.
• The contents of files you upload are never transferred to any ad network, analytics provider or other third party.

6) Retention

• Uploaded files: deleted when processing completes (or after a short reliability window).
• Server logs: kept short-term for security and rotated (typically 30–90 days).
• Cookie lifetimes: listed in the Cookies Policy table.
• Contact e-mails: for the duration of handling your request and statutory limitation periods.

7) Your rights under KVKK Article 11

As a data subject you have the right to:

• Learn whether your personal data is processed,
• Request information about such processing,
• Learn the purpose of processing and whether data is used accordingly,
• Know the third parties to whom data is transferred, domestically or abroad,
• Request correction of incomplete or inaccurate data,
• Request erasure or destruction under KVKK Art. 7,
• Request that corrections/erasures be notified to third-party recipients,
• Object to results produced exclusively by automated analysis that affect you adversely,
• Claim compensation for damages arising from unlawful processing.

8) How to apply

Send your request to kaantokali1@gmail.com in line with the Turkish Communiqué on Application Procedures to the Data Controller. Include information identifying you and state your request clearly. Applications are concluded free of charge within 30 days at the latest. If your application is rejected or you find the response insufficient, you may lodge a complaint with the Turkish Personal Data Protection Board (KVKK Kurulu).