KVKK Information Notice
Last updated: November 1, 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It summarises how your personal data is processed when you use the Vernans website, web app, mobile apps and RSVP pages. Our Privacy Policy contains more detail.
1. Data controller
Emre BALLI ("Vernans")
- Address: İstanbul
- Email: privacy@vernans.app
2. Personal data we process
| Category | Data |
|---|---|
| Identity | Name and surname |
| Contact | Email address and phone number |
| Customer transactions | Events, guest lists, groups, seating, tasks, budget items, RSVP answers and subscription status |
| Visual records | Profile photo (when you sign in with Google) and event photos |
| Transaction security | One-way hash of the IP address, session information, security and access records |
| Marketing | Newsletter subscription (email address and language) |
| Special category (health) | A guest's dietary note, only if the host asks for it and the guest gives explicit consent |
| Device and usage | Analytics and crash records in the mobile apps |
3. Purposes of processing
- Creating and managing your account and signing you in;
- providing event planning, guest list, seating, check-in and RSVP features;
- sharing events with the people you choose;
- managing Pro subscriptions;
- sending sign-in codes and service emails;
- ensuring information and transaction security and preventing abuse;
- improving the Services through aggregated analytics and crash reports;
- sending the newsletter to those who subscribe;
- fulfilling legal obligations and handling legal claims.
4. Legal grounds
Your personal data is processed on the following grounds in Article 5 of KVKK: it is necessary for the establishment or performance of a contract (Art. 5(2)(c)); it is necessary to comply with a legal obligation (Art. 5(2)(ç)); it is necessary for the establishment, exercise or protection of a right (Art. 5(2)(e)); it is necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed (Art. 5(2)(f)); and, for the newsletter, your explicit consent (Art. 5(1)). Health data in dietary notes is processed only with the guest's explicit consent under Article 6 of KVKK.
5. Method of collection
Personal data is collected electronically, by fully or partly automated means, through the website, the web app, the mobile apps, RSVP pages, email and our service providers (for example Google sign-in, App Store, Google Play, RevenueCat and Paddle).
6. Transfers
Your personal data is shared, for the purposes above, with the service providers listed in our Privacy Policy (hosting, database, email, analytics, subscription management and backups), with the people you choose to share an event with, where required by law with authorised public institutions, where necessary for the establishment, exercise or protection of a right with our legal advisers and, if the Services are transferred, with the person or company that takes them over. Some providers are located abroad, including in the European Union and the United States. Transfers abroad are carried out in accordance with Article 9 of KVKK, relying on appropriate safeguards such as standard contracts.
7. Guest data
The personal data of guests that a host adds or collects through RSVP pages is processed by the host as data controller. Vernans processes this data as a data processor on behalf of the host. Guests can address their requests to the host directly. If they contact us, we pass the request on to the host.
8. Your rights under Article 11 of KVKK
You have the right to:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether it is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom it is transferred;
- request correction if it is incomplete or inaccurate;
- request its deletion or destruction under the conditions in Article 7 of KVKK;
- request that the correction, deletion or destruction be notified to the third parties to whom it was transferred;
- object to a result against you that arises from analysis exclusively by automated systems;
- claim compensation if you suffer damage because of unlawful processing.
9. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request by email to privacy@vernans.app from the email address registered in our system. Your request should include your name and surname, your Turkish ID number (for citizens of Türkiye) or your nationality and passport number (for foreign nationals), your address for notifications, your email address or phone number, and the subject of your request. If we cannot verify your identity, we may ask for additional information to protect your personal data.
We will answer free of charge within 30 days at the latest. If answering requires an additional cost, we may charge the fee set by the Personal Data Protection Board. If your request is rejected, our answer is found insufficient or we do not answer in time, you may lodge a complaint with the Personal Data Protection Board.