1. Data controller
On greenredflagger.com, operated by Buğra Kerem Özcan (KOZ Studios), your personal data is processed under Law No. 6698 on the Protection of Personal Data (KVKK). Tax/registry no: 6690903729. Address: Yeni Bağlıca Mah. Bağlıca Blv. No: 70, Etimesgut/Ankara. Requests and contact: [email protected].
2. Categories of data processed
Identity information (name, username), contact information (e-mail), date of birth and age information (for 18+ verification), transaction information (voting history, suggestion history, comments), usage information (IP address, device information, usage statistics), marketing information (e-mail notification preferences). When a Premium membership is purchased, payment and invoice information is processed; payment is received through a licensed payment institution, and your card information is not stored on our site. Evaluation content entered by users on the platform and potentially concerning third parties (Red Flag/Green Flag texts) is also processed, see section 5.
3. Purposes of data processing
Membership operations, user authentication, verification of the 18+ age limit, service provision, moderation of content, usage statistics, security measures, and compliance with legal obligations. E-mails for marketing purposes are sent only with your explicit consent.
4. Legal basis
KVKK 5/2-c (establishment or performance of a contract), 5/2-ç (legal obligation), 5/2-f (legitimate interest). For marketing, 5/1 (explicit consent). Date of birth for 18+ verification is processed within the scope of legal obligation and legitimate interest.
5. Content concerning third parties
The platform hosts evaluation content entered by users about other persons (hosting provider within the meaning of Law No. 5651). Such content is user opinion and is not verified by the platform. A person who is the subject of content may request removal, correction, or submit an objection via [email protected] or through the report button on the relevant content (notice and takedown). Notices are reviewed by the moderation team; content that violates the rules is removed. The assessment regarding legitimacy under KVKK articles 5/6 and personality rights is carried out under lawyer supervision.
6. Data transfer
Our service providers: Cloudflare (CDN, security), Neon (PostgreSQL database), Resend (e-mail), Sentry (error monitoring), Vercel (hosting), and a licensed payment institution for Premium payments (established in Turkey with its own data controller responsibility). These providers may have servers abroad (USA/EU); therefore personal data may be transferred abroad under KVKK Article 9. Transfers take place within the framework of contracts with providers and the required technical and administrative measures.
7. Data retention period
Data is retained for as long as your account remains active. When an account deletion request is fulfilled, it is deleted within a reasonable period pursuant to KVKK Article 7. Anonymized statistics may be retained.
8. Your rights as a data subject (Art. 11)
Under KVKK Article 11, you have the following rights: to learn whether your data has been processed, to request information if it has been processed, to learn the purpose of processing, to request correction of incomplete or inaccurate data, to request deletion or destruction, to request notification to third parties, to object to the result of analyses made by automated systems, and to compensation in case of damage. You may send your applications to [email protected]; requests are answered within 30 days at the latest under KVKK.
9. Data export and deletion
You may close your account from the /profil page. If you want all your data to be exported or permanently deleted, you may apply to [email protected]. Deletion is carried out within a reasonable period (generally within 24-72 hours).