Personal Data Notice

1. Data controller and contact

BeyazYakalıdan is operated by Hgerman. For personal data, privacy, account, or legal notice requests, contact info@beyazyakalidan.com.

2. Scope

This notice applies to visitors, registered users, listing owners, buyers, users who send messages, users who complete onboarding, users who verify a company email address, and people who contact BeyazYakalıdan for support or legal requests.

3. This notice is not consent

This text is provided to inform users before and during personal data processing. Where explicit consent is legally required, it must be requested separately from this notice.

4. Collection methods

Personal data may be collected directly through forms, onboarding screens, listings, photos, messages, reports, profile settings, and support requests; automatically through cookies, session records, IP address, request logs, security logs, and browser/device data; and through LinkedIn when users sign in or when LinkedIn provides permitted profile, email, and workplace information.

5. Personal data categories

• Identity and profile: name, surname, LinkedIn identifier, profile URL, profile photo, headline, and account status.
• Contact: email address, company email, optional phone number, notification preferences, and support correspondence.
• Professional and company: company name, company identifier, company domain, title, company verification status, verification date, and verification source.
• Marketplace activity: listings, listing photos, listing category, condition, city, price, currency, favorites, reports, messages, conversations, moderation status, admin notes, and sold markers.
• Security and technical logs: IP address, approximate country derived from IP address, authentication records, session identifiers, anti-forgery records, request logs, error logs, and misuse-prevention signals.
• Consent and compliance records: notice-read confirmation, terms acceptance, contact data policy confirmation, email preference records, timestamps, and audit records.

6. Processing purposes and legal bases

• Creating, authenticating, and securing LinkedIn-based accounts; based on contract performance, legal obligations, and legitimate interests.
• Verifying company identity and enabling company-based marketplace filters; based on contract performance and legitimate interests in marketplace trust.
• Publishing, editing, searching, filtering, moderating, hiding, rejecting, and reporting listings; based on contract performance, legitimate interests, legal obligations, and content made public by the user.
• Showing seller profile, company information, listing content, optional phone number, and trust signals; based on contract performance and explicit user choices where required.
• Operating messages, favorites, notifications, email alerts, reports, admin review, user support, and abuse prevention; based on contract performance, legitimate interests, and user preferences.
• Preventing fraud, spam, misleading listings, unauthorized access, and unlawful platform use; based on legitimate interests and legal obligations.
• Maintaining logs, backups, service continuity, legal records, and information security; based on legal obligations and legitimate interests.

7. LinkedIn and company verification

LinkedIn sign-in is required. LinkedIn may provide basic profile and email data, and where permitted by LinkedIn and the authorization flow, current workplace information. BeyazYakalıdan may restrict manual company changes to protect trust, prevent impersonation, and keep company filters reliable.

8. Listings, regulated categories, and payments

BeyazYakalıdan is designed for workplace-based second-hand product discovery. Vehicle and real estate sale categories, and similar categories requiring official authorization, are not supported. BeyazYakalıdan does not collect card data, bank account data, payment credentials, payment orders, escrow instructions, or payment confirmations. Payments, delivery, product inspection, tax, return, and warranty matters are handled directly between users outside the platform.

9. Transfers to third parties

Personal data may be shared with hosting, database, file storage, email, security, monitoring, authentication, support, moderation, and legal service providers only to the extent necessary to operate the service. This may include Microsoft Azure for infrastructure and storage, LinkedIn for authentication, email infrastructure providers for notifications, and authorized public institutions or courts when legally required.

10. International transfers

Because the service uses global cloud, identity, email, and content delivery providers, personal data may be processed outside the user's country of residence. Where applicable, BeyazYakalıdan aims to rely on appropriate legal safeguards for international transfers.

11. Storage periods

Account data is stored while the account remains active. Listings, photos, messages, reports, favorites, consent records, and logs are stored for the period needed to provide the service, resolve disputes, prevent misuse, meet legal obligations, and maintain backups. Deleted or rejected content may remain in logs, audit records, or backups for a limited period.

12. Cookies and session technologies

Essential cookies and session technologies are used for login, language preference, security, anti-forgery protection, session continuity, and basic service operation. Details are provided in the Cookie Policy.

13. User rights

Users may request information about whether their data is processed, access to processed data, correction, deletion or destruction where legally available, information about transfers, objection where applicable, and review of automated results where applicable. Users may also apply to the competent data protection authority.

14. Application method

Personal data requests can be sent to info@beyazyakalidan.com. To protect account security, BeyazYakalıdan may request additional information to verify that the request belongs to the account owner or an authorized representative.

15. Updates

This notice may be updated when the platform, LinkedIn integration, company verification flow, hosting infrastructure, legal requirements, or processing activities change. The current version becomes effective when published.