This notice is issued under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and the related Communiqué on the Procedures and Principles of the Disclosure Obligation.
1. Identity of the data controller
Abdulkerim Atik (OYIST)
Independent developer — Türkiye
Email: info@oyist.com
2. Categories of personal data processed
| Category | Data types |
|---|---|
| Contact | Your email address — only if you write to us |
| Customer transactions | The content of the email you send us |
| Device and usage | Browser type, language/country and pages viewed — only if you allowed analytics |
| Transaction security | IP address — processed by Google if you allowed analytics; no records are kept on our own servers |
3. Purposes of processing
- Serving the website and remembering your language preference.
- With your explicit consent, measuring in aggregate which pages are read.
- Replying to the emails you send us.
- Making statutory notifications to competent authorities.
4. Method of collection and legal grounds
Your personal data is collected through this website and the emails you send us, and nowhere else. Our games create no accounts, make no network calls to us and read no device identifier; the app stores pass us no personal data. Each game’s data behaviour is set out on its own page.
Legal grounds under Article 5 of the KVKK:
- Art. 5/2-c — Directly related to the conclusion or performance of a contract (replying to your email).
- Art. 5/2-f — Legitimate interests (serving the site, remembering your language and cookie choice).
- Art. 5/1 — Explicit consent (optional analytics cookies).
5. Transfer of personal data
If you consented to analytics, visit data is processed by Google (Google Ireland Limited / Google LLC). Beyond that your data is transferred to no one: there is no ad network, no crash-reporting service and no sale of data. Disclosure to competent public authorities upon a lawful request is reserved.
Because Google’s servers are outside Türkiye, allowing analytics means your data is transferred abroad. That transfer rests on your explicit consent under Article 9 of the KVKK; if you decline, the analytics code is never downloaded to your browser and no transfer takes place.
6. Retention
The emails you send us are kept for as long as the correspondence requires and are then deleted. Cookies stay on your device and you can clear them from your browser settings at any time. If you allowed analytics, visit data is processed by Google under its own retention period. Nothing is stored on our own servers. See our Privacy Policy for detailed periods.
7. Your rights as a data subject (KVKK Art. 11)
- Learn whether your personal data is processed.
- Request information if it has been processed.
- Learn the purpose of processing and whether the data is used accordingly.
- Know the third parties in Türkiye or abroad to whom the data is transferred.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction under Article 7 of the KVKK.
- Request that corrections and deletions be notified to third parties to whom the data was transferred.
- Object to a result against you produced solely by automated analysis.
- Claim compensation for damage arising from unlawful processing.
8. How to submit a request
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests:
- Via registered electronic mail (KEP), secure electronic signature or mobile signature,
- From the email address already registered in our systems, to info@oyist.com.
Your application must state your name, contact details, the subject of the request and any information verifying your identity. Requests are concluded free of charge as soon as possible and within 30 days at the latest; where the process entails an additional cost, the fee set by the Board may be charged.
If your application is rejected or you find the response insufficient, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the response and in any case within 60 days of the application date.