Data Processing Agreement

Last updated: 29 Nisan 2026Version: 1.0-taslakDownload PDF

Parties

Data Controller (test user CPA): firm name, Tax ID, address filled at registration.

Data Processor (PratikYedek): Berhan Tecer; kvkk@pratikyedek.com.

1. Subject and term

Test user duration: 30 days; auto-renews under paid subscription. Termination: 30-day written notice. Real deletion within 30-day cooldown after termination; legal records (TTK / VUK 10 years) kept separately.

2. Sub-processors

Domestic (Türkiye): GlitchTip self-hosted, Foriba, PaynKolay, SMS providers, Cloudflare TR edge. International (KVKK § 9, explicit consent): Google BYOS Drive, Microsoft BYOS OneDrive (user choice). BYOS forbidden in CPA tier.

3. Processor obligations

End-to-end encryption (client-side AES-256-GCM)
Encryption-at-rest (LUKS) + TLS 1.2+
WAL+PITR 5-min RPO
72-hour breach notification (KVKK § 12)
30-day response to KVKK § 11 requests

4. Dispute resolution

İstanbul courts; KVKK Authority complaint right reserved.