Last updated: 12 July 2026

Sitabula KVKK Disclosure Notice

This text has been prepared for general information purposes regarding the personal data that may be processed within the scope of the Sitabula application and its related support processes, under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

This translation is for information only

KVKK is a text belonging to Turkish legislation. This English page has been prepared solely for information purposes; legal effect lies with the Turkish text. In the event of any discrepancy between the two versions, the Turkish disclosure notice prevails.

1. Data controller

Personal data relating to the Sitabula service may be processed by Sitabula, or within a contractual framework to be separately agreed with the corporate customer, depending on the service delivery model. In self-hosted or private cloud deployments, the parties' data controller / data processor roles are clarified separately in the contract.

Contact: info@stner.org

2. Categories of processed data

  • Identity and account data: name, e-mail address, user name, role, permission information
  • Project and operation data: production, quantity take-off, progress payment, stock, shipment, timesheet, current account and note records
  • File and media data: photographs, documents, uploaded files and report outputs
  • Technical and transaction data: session records, device information, error logs and support records

3. Purposes of processing personal data

  • Operating the application, authenticating users and providing permission management
  • Carrying out construction site and project operations, reporting and archiving records
  • Providing support, maintenance, fault detection, information security and operational continuity
  • Evaluating and concluding requests, complaints, account deletion or data applications
  • Carrying out contract, invoicing and legal obligation processes where necessary

4. Legal grounds

Depending on the specific processing activity, personal data may be processed on the legal grounds of being necessary for the conclusion or performance of a contract, fulfilment of the data controller's legal obligation, the establishment, exercise or protection of a right, legitimate interest and, where required, explicit consent.

5. Method of collection

Data may be collected electronically through the mobile and Windows applications, web forms, support e-mails, corporate onboarding flows, user transactions and technical logging mechanisms.

6. Transfer framework

Data is not sold for advertising purposes and is not shared with data brokers. However, it may be processed to a limited extent within hosting, infrastructure, support or consultancy processes as required for the provision and security of the service, technical maintenance, legal obligations or the corporate deployment model. In such cases the scope of access and the distribution of roles are limited within a contractual framework.

7. Rights of the data subject

  • To learn whether their personal data is being processed
  • To request information if it has been processed
  • To learn the purpose of processing and whether the data is used in accordance with that purpose
  • To request correction if the data has been processed incompletely or inaccurately
  • To request erasure or destruction where the conditions are met
  • To claim compensation for damage suffered due to unlawful processing

For applications: info@stner.org