1. Data controller

Data controller: Orbly

Contact: info@orbly.social · https://orbly.social

2. Categories of personal data processed

• Identity (name, username), contact (email), digital identity (IP address, device identifiers, session cookies/tokens).
• Visual and audio records (profile and post media).
• Transaction security (sign-in records, suspicious-activity data).
• Marketing and preference (notification settings — only with your explicit consent or via your settings).
• User content and social-network interaction data.

3. Purposes of processing

• Carrying out membership and contractual services.
• Carrying out information security processes.
• Managing user relations and responding to support requests.
• Fulfilling obligations arising from legislation.
• Statistics and improving service quality (on an anonymized basis or within the scope of legitimate interest).

4. Legal grounds

Your personal data is processed under KVKK (Turkey's Personal Data Protection Law No. 6698) Art. 5/2 (contract, legal obligation, the data controller's legitimate interest) and, where explicit consent is required, under Art. 6 (your explicit consent).

5. Transfer

Your data may be transferred to server hosting, email, OAuth providers, and technical infrastructure partners, to the extent necessary for the performance of the service.

Transfers abroad comply with KVKK Art. 9; where necessary, your explicit consent is obtained or the safeguards determined by the Board are applied.

6. Method of collection

Data is collected electronically through Platform forms, automatic logs, cookies/similar technologies, and third-party authentication services.

7. Rights under KVKK Art. 11

Under the Law, you have the following rights:

• To learn whether your personal data is processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties to whom the data is transferred, domestically or abroad.
• To request correction if the data is incomplete or inaccurate.
• To request deletion or destruction under KVKK Art. 7.
• To request that corrections or deletions be notified to third parties to whom the data was transferred.
• To object to an outcome to your detriment arising solely from analysis by automated systems.
• To request compensation for damages arising from unlawful processing.

8. How to apply

To exercise your rights, you may apply to info@orbly.social with information verifying your identity.

Depending on the nature of the request, applications are concluded free of charge within at most 30 days; if the process requires an additional cost, the fee set in the Board's tariff may be charged.

If your request is rejected, you retain the right to file a complaint with Turkey's Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

9. Disclosure obligation

Access to the Privacy Policy and this disclosure notice is provided during sign-up or sign-in. You may use the service without reading these texts; however, use constitutes acceptance of the relevant contractual and statutory provisions.