Skip to content

Personal data protection

Privacy notice for partner applications

This notice explains how we process the personal data you share in the Nervay Partner Network application form, under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies to you, the EU General Data Protection Regulation (“GDPR”).

Last updated: 16 October 2026

Data controller

Your personal data is processed by Nervay Teknoloji A.Ş. (“Nervay”) as the data controller.

Address
Kirazlıdere Mah. Eski Ankara Cad. İdari Bina A-1 Blok No:4A-1, Çekmeköy/İstanbul
E-mail
info@nervay.com

What personal data we process

  • Identity: your first and last name
  • Contact: your e-mail address
  • Professional details: whether you apply as an individual or a company, your company name, your area of expertise, the sectors you work in, your country and region, and your website or LinkedIn profile if you share one
  • Your application: the partnership model you prefer and what you expect from working together
  • Security: the IP address of the device you send the form from, and the time you send it

We do not ask for special categories of personal data (such as health, religion or political opinions); please do not include them in your message.

Why we process it

  • To receive, review and decide on your partner application
  • To contact you about your application
  • To prepare a partnership agreement when an application is accepted
  • To prevent misuse of the form and duplicate applications, and to keep our systems secure
  • To meet our legal obligations and to protect our rights in a dispute

Under KVKK Article 5(2), we process your personal data because it is:

  • directly related to entering into a contract (point c): reviewing your application and preparing a partnership agreement
  • necessary for us to meet a legal obligation (point ç)
  • necessary to establish, exercise or defend a right (point e)
  • necessary for our legitimate interests, without harming your fundamental rights and freedoms (point f): reviewing applications in order, contacting you and keeping the form secure

Where the GDPR applies, the corresponding bases are Article 6(1)(b) — steps taken at your request before entering into a contract — Article 6(1)(c) — a legal obligation — and Article 6(1)(f) — our legitimate interests.

We do not ask for your consent for the application. If we later wish to send you newsletters or promotional messages, we will ask for that separately, and it will be optional.

How we collect it

We collect your personal data electronically when you fill in the partner application form on our website and send the form, or the e-mail the form prepares for you.

Who we share it with

We share your personal data only for the purposes above, and only as far as needed, with:

  • Vercel Inc., which hosts our website, and the providers of our e-mail and application management services
  • public authorities that are legally entitled to request it

These providers’ servers may be outside Turkey. Any transfer abroad is made only under the conditions of KVKK Article 9 and, where the GDPR applies, with appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We do not sell your personal data or share it with third parties for marketing.

How long we keep it

We keep your application for 12 months after it is decided; then your data is erased, destroyed or anonymised. If we sign a partnership agreement, we keep your data for the term of the agreement and for the periods the law requires.

IP address records kept for security are held only briefly.

Your rights

Under KVKK Article 11 you may ask us to:

  • tell you whether your personal data is processed and, if so, give you information about it
  • tell you why it is processed and whether it is used for that purpose
  • tell you the third parties it is transferred to, in Turkey or abroad
  • correct it if it is incomplete or inaccurate
  • erase or destroy it under the conditions of KVKK Article 7
  • tell the third parties it was transferred to about a correction, erasure or destruction
  • reconsider a result against you that comes solely from automated analysis
  • compensate you for damage caused by unlawful processing

Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction of processing, objection and data portability, and you may lodge a complaint with a supervisory authority — in Turkey the Personal Data Protection Authority (KVKK), or the authority of the EU country where you live or work.

How to contact us

To use your rights, send us your request in one of these ways:

  • In writing: Kirazlıdere Mah. Eski Ankara Cad. İdari Bina A-1 Blok No:4A-1, Çekmeköy/İstanbul
  • By e-mail, from the address you used in your application: info@nervay.com

We answer as soon as possible and within 30 days at the latest, free of charge; if your request involves a separate cost, a fee set by the Personal Data Protection Board may be charged.

Back to the application form