Turkish Personal Data Protection Law (KVKK) Notice

How we process your personal data as a data controller under Türkiye's Law No. 6698 on the Protection of Personal Data.

Draft placeholder text — not yet reviewed by a lawyer. Replace with the final wording (and company registration details) before this site goes live to real customers.

Data controller

The Express Visa acts as the data controller (veri sorumlusu) under Law No. 6698 on the Protection of Personal Data ("KVKK") for personal data processed in connection with our visa application review service. The data controller is Express Visa Turizm Sanayi ve Ticaret Limited Şirketi (Turkish tax ID: 3810921891, MERSİS No: 0381092189100001), registered at Merkez Mah. 161 Sk. Kaya-3 Sitesi A Blok No: 3A, İç Kapı No: 1, Kemer/Antalya, Türkiye.

What we process and why

We process your identity, contact, passport, travel and payment data to prepare and submit your visa application, communicate with you, comply with our legal obligations, and establish or defend our legal rights, for the purposes set out in our Privacy Policy.

Legal grounds

We rely on Article 5 of the KVKK: performance of a contract you are a party to, compliance with a legal obligation, and our legitimate interests balanced against your fundamental rights. Where none of these apply, we ask for your explicit consent.

Transfer of your data

We may transfer your data, to the extent necessary for these purposes, to the relevant government authority, our payment processor and our IT service providers, within Türkiye and, where required, abroad, in accordance with Articles 8 and 9 of the KVKK.

Your rights under Article 11

You may apply to us to find out whether we process your data, request information about it, ask for correction or deletion, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.

How to exercise your rights

Send a written request to info@expressvisa.app, identifying yourself as required by the Communiqué on the Procedures and Principles of Application to the Data Controller. We respond within 30 days at the latest, free of charge unless the request requires a cost.