Yasal · Gizlilik

Gizlilik Politikası

Bu Gizlilik Politikası, Ödemelinki olarak kişisel verilerinizi hangi amaçlarla işlediğimizi, nasıl koruduğumuzu ve 6698 sayılı Kişisel Verilerin Korunması Kanunu (KVKK) kapsamındaki haklarınızı açıklar.

Son güncelleme: 3 Haziran 2026

01Scope

This Privacy Policy governs how Ödemelinki ("Ödemelinki", "we") processes personal data through the website, web application and mobile apps (iOS / Android) we provide. By using our services, you agree to the data processing activities described in this policy.

Ödemelinki is a platform that lets businesses manage their bank POS accounts from a single dashboard and create 3D Secure payment links. In this policy, "user" refers to the registered business representatives, and "customer" refers to the people who pay through the payment links created by those businesses.

02Data We Collect

Account and identity data

During registration we collect information such as your name, business/trade name, email address and phone number.

Transaction and payment data

We process data related to the payment links you create, such as amount, currency, description, transaction date and transaction status. Sensitive card details such as card number, CVV and PIN are never collected or stored by Ödemelinki — this data is processed directly on the banks' 3D Secure infrastructure.

Technical data

For the security and continuity of the service, technical data such as IP address, device and browser information, session logs and cookie data may be collected automatically.

Communication data

Information you share when you contact us via WhatsApp, email or phone.

03Purposes of Processing

  • Creating, managing and authenticating your account (including 2FA),
  • Creating and delivering payment links and tracking transaction statuses,
  • Providing, improving and supporting the service,
  • Preventing fraud and ensuring platform security,
  • Fulfilling legal obligations and responding to authorized authorities,
  • Contacting and informing you upon your request.

04Legal Bases

Your personal data is processed based on the following legal grounds set out in Articles 5 and 6 of the Turkish Personal Data Protection Law (KVKK):

  • Being directly related to the conclusion or performance of a contract,
  • Being necessary to fulfil our legal obligations,
  • Being necessary for our legitimate interests, provided your fundamental rights are not harmed,
  • Your explicit consent where required.

05Payment Security and 3D Secure

Ödemelinki is never part of the payment transaction itself. Payments take place on the bank's own 3D Secure secure payment page. Card details do not pass through Ödemelinki's servers and are not stored by us; the payment amount is transferred directly to the business's bank account.

For this reason, the security of your card data is subject to the PCI-DSS and 3D Secure standards of the relevant bank and card networks. Ödemelinki only has access to the transaction outcome (such as approved / declined) and the amount.

06Data Transfers

Your personal data may only be shared with third parties in the following cases and in compliance with applicable legislation:

  • Banks and payment institutions: to carry out the payment transaction,
  • Service providers: for hosting, infrastructure and technical support services,
  • Legal authorities: to authorized public institutions where required by a court order or legal obligation.

Your data is never sold to third parties or transferred for marketing purposes outside the purposes stated in this policy.

07Cookies

Our website uses cookies and similar technologies to maintain your session, remember your preferences (such as language selection) and measure service performance. You can manage or delete cookies through your browser settings; however, disabling some cookies may affect parts of the service.

08Retention Period

Your personal data is retained for as long as necessary for the purpose for which it was processed and for the statutory retention periods required by applicable legislation (for example, legal periods for financial and commercial records). When the retention period ends, your data is deleted, destroyed or anonymized.

09Data Security

To protect your personal data against unlawful access, loss and alteration, we apply administrative and technical measures such as two-factor authentication (2FA), encryption, access control and regular security audits. Nevertheless, please note that no method of transmission over the internet is 100% secure.

10Your Rights Under KVKK

Pursuant to Article 11 of the KVKK, as a data subject you have the following rights:

  • To learn whether your personal data is processed and to request information about it,
  • To learn the purpose of processing and whether it is used in line with that purpose,
  • To know the third parties to whom data is transferred,
  • To request correction of incomplete or inaccurately processed data,
  • To request deletion or destruction of your data,
  • To object to a result against you arising solely from automated analysis of your data,
  • To claim compensation if you suffer damage due to unlawful processing.

11Changes to This Policy

This Privacy Policy may be updated from time to time. Significant changes will be published on this page and the "Last updated" date at the top will be revised. Your continued use of the services means you accept the current policy.

12Contact

For any questions about our privacy policy or to exercise your rights under the KVKK, you can contact us:

Ödemelinki

Email: [email protected]

Phone: +90 545 226 55 66

Web: odemelinki.com.tr