KVKK
PersonalDataProtection(KVKK)
Turkey's Personal Data Protection Law (KVKK, No. 6698) applies to almost every organisation that processes personal data. Compliance is not just a legal document: it means knowing where, how and by whom data is processed, and protecting it technically. Together with our legal partners we handle both sides from a single point.
What we do
- 01
Data inventory
We map which department processes which personal data, for what purpose and for how long.
- 02
VERBIS registration
We assess your obligation to register with the Data Controllers' Registry and handle registration and updates.
- 03
Policies and notices
Privacy notices, explicit consent forms and a retention and destruction policy are drafted.
- 04
Technical and organisational measures
Access control, logging, encryption and backup measures are designed in line with the Board's guidance.
- 05
Staff training
Role-appropriate awareness training for every employee who handles personal data.
- 06
Periodic audits
Regular internal audits keep compliance on track and gaps are reported.
Who must register with VERBIS?
- Controllers with more than 50 employees or a balance sheet above the regulatory threshold
- Data controllers established outside Turkey
- Those whose main activity is processing special categories of data
- Public institutions
More services
Let's review your infrastructure together.
A short call is all it takes to assess where you stand and map out a plan tailored to you.