01 / Data Controller
The illumination text covers the CareVar Ecosystem web experience and external form redirects
This page is prepared to summarize the personal data processing topics that may arise in the main website, platform introduction cards, coming soon modal guides, and external form flows directed for volunteer applications.
- This text may be updated as the data controller organization, product launch structure, and official communication channels go live.
- When redirecting to external services, the relevant third party's own privacy and data processing rules may also apply.
02 / Processed Data
Technical logs, usage signals, and volunteer application form data are handled strictly limited to their purpose
Data topics that may be processed can include identity/contact information, expertise and application declaration, site access logs, device-browser information, security records, and in-site navigation statistics.
- Legal reasons can be situations where explicit consent is given, the necessity of a contract/pre-application process, legitimate interest, legal obligation, and the establishment/exercise/defense of a right.
- Unless special category data sharing is requested, it is recommended that you do not transmit data in this category in application forms.
03 / Transfer and Storage
Transfers are structured to be limited only to services, security, and mandatory legal processes
Since the volunteer application form is opened via Google Forms, the information you write in the form fields can be processed on the Google service infrastructure. Third-party services used in technical hosting, visual delivery, security, and analysis layers may also process limited data.
- The storage period should be limited to the application evaluation, legal requirement, security log need, and operational necessity.
- Access control, minimization, and record tracking principles are based on reducing unauthorized access.
04 / Data Subject Rights
You can exercise the right topics under KVKK Article 11
Rights to learn whether your personal data is processed, request information if processed, learn the purpose of processing and whether it is used in accordance with its purpose, know the transferred third parties, request correction of incomplete/incorrect data, request deletion/destruction if conditions exist, request these actions to be notified to transferred third parties, object to analyses exclusively based on automated systems, and demand compensation if damage occurs due to unlawful processing can be evaluated within the framework of KVKK.
- According to the KVKK systematics, the data subject first forwards their request to the data controller; if the application yields no result, a complaint to the board may also come to the agenda.
- For the official framework, you can examine the KVKK Data Subject's Rights and KVKK Right of Application pages.
Official Source Note
The rights and application framework was summarized with reference to KVKK's official information pages
This text was prepared as a publication draft. Before going to final publication, brand contact information and data controller details should be clarified through legal control.
