Privacy Notice · GDPR & KVKK

1. Controller

İrim Tercüme ve Danışmanlık · Banu İrim
Cumhuriyet Cad. No 22, Rüstempaşa Mah., Yalova Merkez, Türkiye
Yalova Vergi Dairesi · VKN: 2751001896
info@rentenanspruch.com · +90 850 307 27 75
The controller is Banu İrim, trading as İrim Tercüme ve Danışmanlık. Rentenanspruch.com is the service brand. The Berlin postal contact is neither a customer office nor presented as an appointed EU data-protection representative.

2. Website, hosting and email

The website and mailbox use Güzel Hosting. Technical connection information may include IP address, time, requested page and browser details, for page delivery, troubleshooting and security. Where GDPR applies, the basis is Article 6(1)(f), the interest in secure operation; the corresponding Article 5 KVKK condition applies, particularly necessary legitimate interests not overriding your rights. Technical data is needed for those operating/security purposes or investigation of a specific incident. The provider’s precise log periods, server countries and contractual legal entity are still being verified; no unverified location or period is promised.

3. Enquiries and services

We receive information directly through your forms, email, telephone or messages. Necessary contact and enquiry information is used to answer you, prepare a contract and perform the agreed service: Article 6(1)(b) GDPR / Article 5(2)(c) KVKK where applicable. Billing and legally required records rely on the relevant legal-duty condition, including Article 6(1)(c) GDPR. Initially provide only necessary information.

4. Different check tools

The simple short check evaluates selections in your browser without deciding eligibility. The Document Preparation Check sends three selections and your email address to the website to generate a one-off requested list through the hosting mail service. Answers are not kept as a client file. Hashed abuse-prevention identifiers expire within 24 hours. This does not subscribe you to the newsletter. Processing is for your requested one-off service and, where required, your specific consent, not blanket marketing permission.

5. Optional MailPoet newsletter

For voluntary subscriptions we process email, optional name, language, list/status and necessary signup and confirmation evidence. Subscription becomes active after email confirmation. MailPoet manages subscriptions within WordPress; configured SMTP delivery uses the hosting mailbox. New guides and service offers are announced at most weekly when new content exists. Separate consent is the basis where required: Article 6(1)(a) GDPR / Article 5(1) KVKK. Buying a service does not require subscription. Open/click tracking was disabled in the settings checked. Subscription does not authorise unrelated purposes.

6. Unsubscribing and retention

Use the unsubscribe link in each newsletter or email info@rentenanspruch.com. Active subscriptions continue until withdrawal. Necessary minimal suppression records and consent/legal-claim evidence may then remain separately for the relevant obligation or concrete legal purpose. Deleting suppression evidence must not cause unwanted renewed mailing. A new blog post does not itself authorise sending a campaign.

7. WhatsApp and external websites

WhatsApp/Meta is an optional external contact channel. A link opens it; you send the prepared message there yourself. Its own processing rules apply; email and telephone alternatives remain available. Do not send confidential records without an agreed channel. Authority and irim.tr links lead to independent sites. Provider information: WhatsApp privacy and Güzel Hosting.

8. Documents, special-category data and authorisation

The necessary documents, recipients and channel are agreed for the specific case. Health information also requires a valid Article 9 GDPR / Article 6 KVKK condition. General terms acceptance does not replace this. Public short forms are not intended for diagnoses, identity, bank or insurance numbers. Required limited authorisation is separately signed. The prepared payment-triggered authorisation automation is currently disabled; payment grants no authority.

9. Recipients and international processing

Authorised staff and hosting/email providers have necessary access for the purposes described. Institutions or separately agreed translation providers receive necessary records only within the agreed lawful scope. The operator is in Türkiye, so direct enquiries are processed by the Turkish business. This notice does not claim an EU adequacy decision for Türkiye or that standard contractual safeguards have already been executed. Required transfer conditions under Articles 44 onward GDPR and Article 9 KVKK must be separately met. Actual recipients, server countries and necessary contractual safeguards must be verified before additional services are used; blanket consent does not replace that review. Card payment opens an external iyzico Link page, provided by iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., Türkiye. Card and payment data entered there is handled under the provider’s own information; this website does not collect or store card numbers or security codes. We subsequently check the payment confirmation needed for the order and accounting. Payment provider information.

10. Deletion of working documents

Client working documents and copies under our control are deleted within 14 days after the agreed case is completed. Invoices, accounting, statutory records and necessary consent/legal-claim evidence are kept separately for the relevant legal obligation or concrete legal purpose. Technical backups and external recipients have separate cycles; immediate deletion of every third-party copy is not claimed. New work may require you to supply records again.

11. Cookies and measurement

WordPress login, security, forms and any cart may require technical cookies/storage. Newsletter subscription is not analytics or advertising-cookie consent. Previous information-page checks did not identify Google Analytics or Meta Pixel integrations; this is not a complete audit of every plugin. Optional tracking must not be enabled without the required notice and consent controls.

12. Your rights

Where GDPR applies, you may request access, correction, erasure, restriction, portability and objection under the statutory conditions, and object to direct marketing at any time. Consent may be withdrawn for the future without affecting earlier lawful processing. You may complain to a competent authority, particularly where you live or work. GDPR requests are generally answered within one month, with reasons for a permitted extension. Article 11 KVKK provides rights to information about processing, purposes and recipients, correction, deletion/destruction under legal conditions and notification to recipients, objection to adverse solely automated results and compensation for unlawful processing. KVKK requests are answered within 30 days; statutory complaint routes remain available. Use the business address or a legally accepted route, particularly an email previously registered with us to info@rentenanspruch.com. Any identity check is proportionate; do not send unsolicited ID copies. We do not make binding solely automated pension-entitlement decisions.

13. Electronic withdrawal notices

The withdrawal form processes your name, contract identification and receipt email address. The notice and time of receipt are stored as a non-public business record in WordPress, accessible to authorised administrators. The hosting mail service sends receipts to you and our business address. The purpose is legal obligations and handling your contract, not marketing. Statutory evidence-retention criteria apply rather than the 14-day working-document period.

14. Link-payment preparation

The form processes name, email, residence category, package, prior scope/schedule agreement and separate early-performance declarations. A reference, receipt time and displayed text version are stored as non-public business records in WordPress and confirmed to your email through the hosting mail service. This is for your requested contract preparation and declaration evidence, not marketing. Necessary pre-contract steps and legal evidence obligations are the basis (Article 6(1)(b/c) GDPR and applicable KVKK conditions). Only administrators access the records. Abandoned requests are retained only as needed to resolve the enquiry; order evidence follows the applicable legal retention criteria. Hashed abuse-prevention records expire within 24 hours. There is no automatic newsletter registration. This site currently has no automated verification integration for iyzico Link payments.