ONE NBBTC IDENTITY · v1.0 (25.10.2026)
Privacy Notice (KVKK Art. 10)
Data controller: NBBTC GLOBAL DIŞ TİCARET ANONİM ŞİRKETİ (NBBTC GLOBAL A.Ş.), MERSIS: 0630135703100001, Tax No: 6301357031, Trade Registry No: 499168, e-mail: support@nbbtc.global. This is an informative translation; the Turkish text prevails.
Data processed
Identity (first name, last name); contact (e-mail, optional phone); membership and transactions (account, company memberships, roles, requests); transaction security (IP address, session and device information, sign-in records, 2FA status); marketing (only if you opt in).
Purposes
Setting up and managing membership; authentication and account security; company memberships and authorisation; providing platform services; fulfilling legal obligations; responding to requests and complaints; informational messages if you have opted in.
Legal grounds
Conclusion and performance of a contract (Art. 5/2-c); legal obligation (Art. 5/2-ç); establishment, exercise or protection of a right (Art. 5/2-e); legitimate interest for security records (Art. 5/2-f); explicit consent for commercial messages (Art. 5/1).
Collection method
Electronically through sign-up and account forms; automatically through security records and the session cookie.
Transfers
To Vercel, Neon, Resend and Cloudflare (servers in the European Union) for hosting, database, e-mail delivery and file storage, under standard contracts pursuant to KVKK Art. 9; and to public authorities legally entitled to request it.
Retention
For the duration of membership and the periods required by applicable law; thereafter deleted, destroyed or anonymised.
Your rights (Art. 11)
To learn whether your data is processed, request information, learn whether it is used in line with its purpose, know the third parties it is transferred to, request rectification, erasure or destruction, request that these actions be notified to recipients, object to results of automated analysis, and claim compensation for damages.
Requests
Requests may be sent to support@nbbtc.global. Formal requests follow the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests by e-mail must be sent from the e-mail address registered in the system. Requests are answered free of charge within 30 days at the latest.