Data Protection Notice

**Data Controller:** BUDEFA (budefa.com)

**Personal Data Processed:** Name, surname, email address, IP address, browser information, platform usage data.

**Purposes of Processing:** Account creation, provision of platform services, communication, compliance with legal obligations.

**Legal Basis:** Performance of a contract and legitimate interest under Article 6(1)(b) and 6(1)(f) of the GDPR (for users in the EU/EEA) and Article 5 of Turkish Law No. 6698 on the Protection of Personal Data — KVKK (for users in Türkiye).

**Data Transfers:** Your data may be transferred to domestic and international servers within the scope of platform infrastructure services (Supabase, Vercel), payment services (Iyzico) and email services (Resend).

**Retention Period:** Retained for the duration of your membership and thereafter for the periods required by law.

**Your Rights:** Under the GDPR (Articles 15–21) and, where applicable, KVKK Article 11, you have the right to request information, rectification, erasure, restriction, objection and data portability. For requests: deryautku@coderiapp.com