Frequently asked
Is a KVKK privacy notice mandatory?
Yes. Article 10 of Law No. 6698 obliges every data controller processing personal data to inform data subjects. Even a website with a contact form processes personal data.
Is a privacy notice the same as explicit consent?
No. The privacy notice is an information obligation and is provided without asking for consent. Explicit consent must be obtained separately for specific operations such as marketing emails.
Do I also need a cookie policy?
If you use analytics or marketing cookies, yes. The Personal Data Protection Board's cookie guideline expects information and a consent mechanism for non-essential cookies.
Where should I put the text?
Usually as 'KVKK Privacy Notice' and 'Cookie Policy' links in the site footer, plus a short notice next to form submit buttons.