KVKK Privacy Notice

1. Data Controller

This platform ("CompAtlas", compatlas.com.tr) acts as the data controller. The data controller's trade name, address and contact details will be added to this notice before launch. For requests: [email protected]

2. Data Processed

As a rule, CompAtlas processes corporate, publicly available company data rather than personal data:

• Company name, website (domain and URL), province/location, business category
• Corporate contact details the company publishes openly on its own website

The email address and message you send us via contact/request forms are processed only to respond to your request. Our crawler automatically filters out personal data (names, personal email addresses, etc.) at the collection stage.

2b. Data processed in Phase 2 services

When you use the quote request, job posting and application services, the following data is processed. All of these services are optional and are not required to use the directory.

• Quote request: full name, email, phone (if provided), project description, budget and time frame, the province and service type you select. This data is shared only with at most 5 companies matched to your request and is never published in the directory. Your explicit consent is recorded together with the version of the text you approved.
• Job application: the email address linked to your account, your cover letter and CV link (if provided), and application and outcome timestamps. This data is shown only to the company that posted the job you applied for. CV files are not uploaded to our servers; only the link you provide is stored.
• Review records: as required of hosting providers by Law No. 5651, the content's timestamp and connection information are kept. The raw IP address is not stored; only an irreversible hash (sha256) is recorded.
• Abuse prevention: for form submissions, an IP hash and browser information are processed solely for rate limiting and spam control.

2c. Retention periods

• Quote requests: expire 30 days after creation and drop off companies' dashboards. The record is kept for up to 1 year in case of legal disputes and then deleted.
• Application data (cover letter, CV link): kept for 12 months after the application is resolved and then deleted automatically. This period allows later objections and complaints about the process to be reviewed.
• Review records and Law 5651 traffic information: kept for the legally required period even if the content is taken down. Taking content down updates the record's status; it does not delete it.
• Notification delivery records: kept for 2 years so that sending limits and subscription preferences can be audited.

3. Purposes of Processing

• Providing a directory where companies can be discovered by sector and location
• Handling contact and request processes
• Ensuring service security and preventing abuse
• Matching quote requests with suitable companies and forwarding them
• Running job posting and application processes and notifying candidates of outcomes
• Fulfilling hosting provider obligations under Law No. 5651 and related legislation

4. Legal Basis

Data is processed on the legal bases of the data controller's legitimate interest (KVKK Art. 5/2-f), provided it does not harm the data subject's fundamental rights and freedoms, and data made public by the data subject (KVKK Art. 5/2-d).

5. Your Rights (KVKK Art. 11)

Regarding your personal data, you have the right to:

• Learn whether it is processed and request information
• Request correction if it is incomplete or inaccurate
• Request its deletion or destruction
• Object to its processing

To have a company record removed, you can use the Data Removal page.

6. Requests

You can send your requests to [email protected]. Requests are resolved within 30 days at the latest under KVKK Art. 13; removal requests are in practice handled within 72 hours.

7. Anonymous Hiring Reviews

By signing in with Google, you can leave a review of a company's hiring process (factual fields such as stars, response time, interview rounds, unpaid assignments, plus a short free text). These reviews appear publicly as "Anonymous candidate" — your name, email or any other identifying information is never shown publicly.

• Internal record: the user ID (user_id) associated with your Google account is stored in the system to prevent abuse and to be able to produce it upon a legal request; this information is never serialized on public pages.
• No names: sharing real people's names in reviews is prohibited; such content is automatically rejected before publication (AI/keyword gate).
• Scope: only facts about the hiring process are reviewed; claims about salaries, company culture or individuals are out of scope and rejected by moderation.
• One-way: companies cannot reply to or dispute reviews in any way; they can only declare their own "we respond" badge — this declaration is shown on the profile next to the actual response rate reported by candidates.
• Notice-and-takedown: to request the removal of a review, you can use the Contact page; you can also flag any review for community moderation with "report" — a review that receives enough independent reports is hidden automatically and sent to admin review.