KSD Website and Mobile App Privacy Policy and KVKK Information Notice
Effective date: 17 October 2026
1. Data controller
Your personal data is processed by the Konya Goldsmiths and Jewelers Association ("KSD" or the "Association") as data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK").
- Address: Şems-i Tebrizi Mahallesi Osman Bey Sokak Torun İşhanı No: 7 / 301-302 Karatay / Konya, Türkiye
- Email: info@ksd.org.tr
2. Scope of this notice
This notice covers the ksd.org.tr website and the KSD mobile app that displays the website's content ("KSD Konya Sarraflar Derneği" on Google Play, "KSD Güven" on the App Store). The website and the app do not ask you to create an account. The app does not request location, contacts or notification permissions; on iOS, the camera and photo library are accessed only with your permission when you choose to add a photo to the Complaint and Report Form.
3. Personal data processed
Your personal data reaches us only through forms that you fill in and through the technical operation of the website:
- Complaint and Report Form: report type, the business or person reported, a description of the incident and up to 3 optional photos. The form does not ask for your identity, but anything you write in the description is also recorded.
- Contact form: name, email address, subject and message.
- KSD Academy pre-registration: name, phone number, participant type and training programme; optionally email address, company name and message.
- Newsletter subscription: email address.
- Member businesses: the name, member number, year of membership and address of each member business are published in the member directory and in Membership Verification.
- Cookie preference: the choice you made and your IP address.
- Technical records: the server's standard access logs (IP address, date and time, requested page, browser information) and the website's session and security cookies.
4. Purposes and legal grounds
- Publishing member businesses in the member directory so that their association membership can be verified: performance of the membership relationship and the Association's legitimate interest (Art. 5/2-c and 5/2-f).
- Examining and concluding complaints and reports: the Association's legitimate interest (KVKK Art. 5/2-f).
- Answering contact messages: the Association's legitimate interest (Art. 5/2-f).
- Assessing Academy pre-registrations and organising training: establishing and performing a contract (Art. 5/2-c).
- Sending the newsletter: your explicit consent (Art. 5/1). You can withdraw your consent at any time.
- Recording your cookie preference: legal obligation (Art. 5/2-ç).
- Website security, preventing misuse and automated (bot) submissions, and keeping access logs: legal obligation and the Association's legitimate interest (Art. 5/2-ç and 5/2-f).
5. Transfer of personal data
KSD does not sell or rent your personal data and does not share it with anyone for advertising or marketing. Form records are seen only by authorised people in the Association's administration panel. They are shared with competent public authorities (courts, law enforcement) only where there is a legal obligation.
The website's fonts, icons and code libraries are served from our own server. In the following cases content is loaded from a service provider abroad, and your IP address and browser information reach that provider:
- Google Maps: loaded only when you click "Show map" on the contact page.
- YouTube: loaded when you click to play a video. Video cover images are served from our own server.
- OpenStreetMap: map images are loaded from here when you choose the map view in the member directory.
6. Retention periods
- Complaint and report records: 5 years after the report is concluded.
- Contact form messages: 1 year after the message is answered.
- KSD Academy pre-registrations: 1 year after the application is concluded.
- Newsletter email addresses: as long as the subscription continues; deleted within 30 days after it ends.
- Cookie preference records: 2 years.
- Server access logs: 2 years.
When these periods end, the data is deleted or anonymised.
7. Cookies and browser storage
The website uses only the cookies it needs to work: a session cookie (ksd-guven-portali-session) and a form security cookie (XSRF-TOKEN). Your light/dark theme choice, your cookie preference and the announcement strips you closed are also stored in your browser. The website does not use advertising or tracking cookies. You can change your cookie preferences in "Cookie Settings" at the bottom of the page.
8. Your rights (KVKK Art. 11)
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether the data is used for that purpose; to know the third parties to whom it is transferred; to request correction of incomplete or inaccurate data and its deletion or destruction; to request that these actions be notified to the parties to whom the data was transferred; to object to an outcome against you that results solely from automated analysis; and to claim compensation if you suffer damage from unlawful processing.
You can send your requests to info@ksd.org.tr or in writing to the Association's address. Requests are concluded within 30 days at the latest. The steps for requesting deletion are explained on the Data Deletion Request page.
9. Changes
When this notice is updated, it is published on this page with a new effective date.
