2026-10-13 · Existing lawyer approval was recorded from the user’s statement and publication instruction of 13 October 2026. This record does not authorize payments or automatic renewal; paid checkout remains closed.
Company management approval date: 2026-09-20. This approval does not constitute payment provider activation or technical acceptance of the data-processing infrastructure.
Translations were prepared with company authorization for use; this is not independent legal review. Draft status and unresolved matters in the source are preserved.
Data controller and brand
Fabay Teknoloji Limited Şirketi · MERSİS No: 0384101893300001 · Tax Identification No: 3841018933 · Tax Office: Selçuk (Konya) · Trade Registry No: 80198 · Registered Office: Horozluhan Mah. Dr. Sadık Ahmet Cad. C Blok No: 98A İç Kapı No: 105 Selçuklu / Konya · Web: https://ekipmanda.com · Support: destek@ekipmanda.com · KVKK: kvkk@ekipmanda.com · KEP: fabayteknoloji@hs01.kep.tr · Telephone: +90 501 042 1295. Ekipmanda and ekipmanda.com are the brand and digital service name operated by Fabay Teknoloji Limited Şirketi; they have no separate legal personality. Fabay Teknoloji Limited Şirketi is the provider under the contracts and of the digital services within the platform. Applications under the Personal Data Protection Law (KVKK) may be sent to the KVKK email address or registered electronic mail (KEP) address above, with the identity verification information described in the Procedure for Applications to the Data Controller.
Categories of data processed
Identity and contact information; account and company information; transaction, listing, quote, payment reference, support and security records; and documents and images uploaded voluntarily by the user may be processed to the extent required by the workflow. Ekipmanda does not store card numbers, expiry dates or security codes.
Purposes and legal grounds
For the purposes of establishing the account and contract, providing the service, information security, preventing misuse, payment and accounting processes, legal obligations and establishing rights, processing relies on the grounds of entering into or performing a contract, legal obligation, establishment of a right and legitimate interest. Marketing activities requiring explicit consent are managed through a separate choice.
Methods of collection
Data is obtained by wholly or partly automated means through account and application forms, transactions within the platform, uploaded files, security and access records, payment provider transaction results and the user’s support communications. If a seller, buyer or company administrator enters data about another person, that user is responsible for providing the necessary information and having authority to share it.
Recipient groups and purposes of transfer
Data may be transferred, to the extent necessary, to authorised company users to carry out the workflow, to the payment institution to obtain collection results, to hosting and security providers to operate the service, to the email provider to send transaction notifications, and to authorised public bodies to fulfil legal obligations. This list is not considered definitive until provider names, locations, data categories and roles are verified against actual contracts.
Transfers abroad
Transfers abroad are made only if one of the conditions in Article 9 of Law No. 6698 and the applicable appropriate safeguard are present. If a standard contract is to be used, the text published by the Board is signed without amendment and the notification obligation is fulfilled. No definitive statement that transfers abroad do or do not occur is made before the actual provider/data-flow inventory is completed.
Retention and disposal
Each data category is retained only for as long as the processing purpose and applicable legal obligation continue. Closing an account does not automatically erase all data; contract, invoice, dispute, security and acceptance records may be retained with restricted access for their separate statutory periods. When the grounds cease to exist, data is erased, destroyed or anonymised during the first periodic disposal period under the retention and disposal policy. The definitive retention-period matrix will be approved after the data inventory and the company’s legal capacities are verified.
Data subject rights and applications
Users may exercise their rights to learn whether their data is processed, request information, learn whether it is used in accordance with its purpose, know the domestic or overseas recipients, request correction, request erasure/destruction when the conditions are met, request notification to recipients to whom data has been transferred, object to a result arising exclusively from automated analysis, and claim compensation for damage. Application channels and identity verification procedures are described in the “Data Subject Application Procedure”; applications are concluded within thirty days at the latest.
Existing lawyer approval was recorded from the user’s statement and publication instruction of 13 October 2026. This record does not authorize payments or automatic renewal; paid checkout remains closed.