Kampio Personal Data Processing Clarification Text
Last updated: 24 October 2026
1. Data Controller
Personal data within the scope of the Kampio platform is processed by the relevant legal entity acting as the data controller in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and relevant legislation.
Operating company: Keşideci Information Technologies Inc.
Tax Office: Maslak Tax Office
Tax Identification Number: 5482308175
Head Office Address: Eski Büyükdere Cad. No: 61/2, 34415 Kağıthane, Istanbul, Turkey
Email: kesideci@kesideci.com
Website: https://www.kampio.online/
2. Processed Personal Data
Depending on the nature of the relevant transaction, the following personal data may be processed within the scope of Kampio's services:
Identity and profile information: First name and surname.
Contact information: Phone number and email address.
Membership information: Account information and membership preferences.
Advertisement information: Advertisement title, description, product photos, product condition and price.
Transaction information: Sales or donation preference, transaction status, necessary records related to delivery and payment processes.
Contact and support information: Requests, complaints and support correspondence.
Transaction security information: Technical records necessary for the security of the website.
Cookies and usage information: Data obtained through cookies and similar technologies used.
Only data that is actually collected and necessary for the relevant purpose will be processed.
3. Purposes of Processing Personal Data
Personal data may be processed for the following purposes, provided that the relevant legal conditions are met:
To create membership and manage user accounts.
To receive, review, publish and manage advertisements.
To coordinate sales and donation processes.
To carry out payment, commission, delivery, cancellation and refund transactions.
To respond to user requests and complaints.
To prevent risks such as fraud and unauthorized access.
To ensure information security and operate systems.
To fulfil legal obligations and address disputes.
To improve service quality.
To conduct campaign and promotional communication, provided that necessary permissions are obtained and regulations are complied with.
4. Method and Legal Reasons for Collecting Personal Data
Personal data may be collected electronically through the Kampio website, membership and advertisement forms, user communication channels, and the technical systems used.
Personal data may be processed based on the following legal reasons specified in Article 5 of the KVKK, provided that it is valid for the relevant processing activity:
It is directly related to the establishment or performance of a contract.
It must be necessary for the data controller to fulfil their legal obligation.
It must be necessary to process data for the establishment, use, or protection of a right.
It must be necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
In cases where explicit consent is required, the data subject must have valid explicit consent.
The applicable legal basis is determined for each specific purpose of data processing.
5. Transfer of Personal Data
Personal data may be transferred to the following recipient groups if necessary for the relevant purpose and if valid legal conditions are met:
Payment service providers: Information necessary for the execution of payment, commission, money transfer, and refund processes.
Technical service providers: Information necessary for the execution of website hosting, software, maintenance, and security services.
Relevant transaction parties: Information that is legally appropriate to share for the execution of the sales or donation process.
Authorised public institutions and organisations: Information necessary for the fulfilment of legal obligations or for responding to legally valid requests.
Professional consultants: Information necessary for the execution of legal, financial consultancy, and similar services.
The data to be transferred within the scope of benefiting from the iyzico infrastructure in payment processes and the roles of the relevant parties are determined according to the actual payment flow and relevant contracts.
In the case of transferring personal data abroad, actions are taken in accordance with the provisions of the KVKK regarding international transfers.
6. Storage and Security of Personal Data
Personal data is retained for as long as required by the relevant processing purposes and in accordance with the retention periods stipulated in applicable legislation.
When the reason for retention ceases to exist, the data is deleted, destroyed, or anonymised in accordance with the relevant legislation.
Appropriate technical and administrative security measures are taken against unauthorised access, loss, and unlawful processing of personal data.
7. Cookies and Similar Technologies
Cookies or similar technologies may be used on the Kampio website. In cases where personal data is processed through these technologies, the information and consent processes required by the relevant legislation are implemented.
For detailed information, the Kampio Cookie Policy can be reviewed.
8. Commercial Electronic Communications
Notifications necessary for the execution of the service, such as membership, advertisement approval, payment, and delivery, are evaluated separately from communications for campaign and advertising purposes.
Campaign, promotional, and advertising emails or SMS messages are conducted in accordance with the permissions and conditions required by applicable legislation.
9. Rights of the Data Subject
Under Article 11 of the KVKK, individuals whose personal data is processed may:
Learn whether their personal data is being processed.
Request information regarding their processed personal data.
Learn the purpose of processing and whether the data is used in accordance with its purpose.
Learn about third parties to whom the data is transferred, whether domestically or internationally.
Request the correction of incomplete or inaccurate personal data.
You may request the deletion or destruction of your personal data within the conditions stipulated by the law.
You may request notification of the correction, deletion or destruction processes to the third parties to whom the data has been transferred.
You may contest the outcome of an analysis resulting against you solely through automated systems.
In the event of damage due to unlawful data processing, you may request compensation for the damage.
10. Application and Communication
You can submit your requests within the scope of the KVKK through the communication channels below, along with information sufficient to verify your identity and evaluate your application.
Keşideci Bilişim Teknolojileri A.Ş.
Address: Eski Büyükdere Cad. No: 61/2, 34415 Kağıthane, Istanbul, Turkey
Email: kesideci@kesideci.com
Applications will be evaluated within the procedures and timeframes specified in the KVKK and relevant legislation.
11. Updates
This Clarification Text may be updated in the event of changes in personal data processing activities or relevant legislation. The current text will be published on the Kampio website.
Kampio — Campus Marketplace