Required before launch
Legal company name, registered address, tax office and number, MERSİS number (if applicable), support email, privacy-request channel, seller identity and applicable service providers have not yet been supplied. These details must be published before this draft is used for real transactions.
1. Data controller
This is an incomplete information-notice draft under Article 10 of Law No. 6698. The legal identity and contact address of the data controller have not yet been supplied. Vectira is the product name, not a confirmed legal entity. The final notice must identify the controller and, if applicable, its representative.
2. Data and purposes
Depending on your use, Vectira processes early-access email and product interests; account email and sign-in identifiers; seller application and product information; test-order, delivery and address information; and technical security/error records. Purposes include account access, application review, private waitlist management, test-order delivery and service security. Test mode does not mean personal data is fictional; use only necessary information.
3. Collection and legal bases
Data is collected electronically through forms, sign-in, product uploads, test orders and technical operation. The final notice must map each purpose to a valid basis under Articles 5 and 6: for example necessity for a contract, legal obligation, establishment or protection of a right, or a balanced legitimate interest. Explicit consent is used only when required, separately from this notice; a notice is not consent. This mapping is pending legal review.
4. Recipients and international transfers
Hosting, authentication, storage and technical service providers may process data to operate the service. Relevant order information may be accessible to the buyer, seller and authorised administrators; waitlist entries are not public. Actual recipients, locations, purposes and any transfers abroad must be verified and disclosed. Transfers must meet applicable Articles 8 and 9 requirements; blanket consent is not a substitute for a lawful transfer mechanism.
5. Your rights
Under Article 11, you may learn whether data is processed, request information, learn the purpose and whether data is used accordingly, learn domestic/foreign recipients, request correction, request deletion or destruction where legal conditions are met, request notification of those actions to recipients, object to an adverse result produced solely by automated analysis, and seek compensation for unlawful processing damage.
6. Applications and retention
A verified controller address and application channel must be supplied to make rights requests operational. Applications follow Article 13 and the applicable communiqué; responses are due as soon as possible and no later than 30 days, with lawful costs only where permitted. Retention periods must be set by purpose and legal duties; deletion may be limited by a valid legal retention obligation. The final retention schedule is pending.