Data controller
The data controller under the KVKK is Kadans:
- Data controller: Kadans
- Email: destek@kadansapp.com
- Website: kadansapp.com
Personal data we process
| Category | Data |
|---|---|
| Identity | Name, username, display name; optionally date of birth and gender |
| Contact | Email address; optionally province and district |
| Visual | Optional profile photo |
| Customer transactions | Donation records and supporter status, contact form topic and message, notify-list preference, language preference |
| Financial | Donation amount, currency, transaction and subscription IDs (card details never reach us) |
| Transaction security | One-way password hash, session records, IP address, browser and device information, one-way hash of the computer's hardware ID, device name, operating system and app version, short-lived request counters that prevent abuse |
| Location | Approximate country and city derived from the IP address (no precise location) |
| Marketing / statistics | Only with your consent, via Google Analytics cookies: pages visited, visit duration, device and browser type, referring site |
We do not process special categories of personal data (health, biometrics, religion, ethnic origin, etc.). Kadans for Zwift does not access your Zwift account and never receives your Zwift password or ride data. The Zwift content update list the app shares contains no personal data; to count how many different users reported a list, we only keep a short one-way hash of the IP address.
Purposes
- Creating your account, letting you sign in and link the Kadans for Zwift app to your account
- Sending account emails (verification, password reset)
- Information security: preventing abuse and unauthorised access, managing devices linked to your account
- Managing donations and the supporter badge, and showing your name on the supporter wall (unless you turn it off)
- Answering your messages and providing support
- Sending a one-time announcement when the release you're waiting for is out
- Keeping the app and the Turkish translation up to date (tracking Zwift content updates)
- If you consent, measuring and improving site usage with statistics
- Meeting legal obligations and requests from competent authorities
Collection method and legal bases
Personal data is collected electronically and by automated means through site forms (sign-up, sign-in, profile, contact, notify list), the Kadans for Zwift app, cookies and similar technologies, and notifications from our payment provider. Legal bases (KVKK art. 5):
| Purpose | Legal basis |
|---|---|
| Account, sign-in, linking the app, account emails | Establishing and performing a contract (art. 5/2-c) |
| Security, abuse prevention, device management, counting Zwift update lists | Legitimate interest (art. 5/2-f) |
| Donation and supporter records | Performance of a contract (art. 5/2-c); legal obligation (art. 5/2-ç) |
| Answering messages | Legitimate interest (art. 5/2-f) |
| Optional profile information, notify-list announcement | Explicit consent (art. 5/1) |
| Site statistics (Google Analytics) | Explicit consent (art. 5/1; cookie banner) |
| Requests from competent authorities | Expressly provided by law; legal obligation (art. 5/2-a, ç) |
Transfers
We never sell your data or use it for advertising. We transfer it only to the following recipients, and only as far as needed to run the service:
| Recipient | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, security | Abroad (mainly US and EU) |
| Resend | Sending account and announcement emails | Abroad (US) |
| Lemon Squeezy | Donation payments (takes payment as the seller under its own terms) | Abroad (US) |
| Google (Google Analytics) | Site statistics, only with your consent | Abroad (US and EU) |
| Competent public authorities | Legal obligation | Turkey |
Transfers abroad are made in line with Article 9 of the KVKK and only as far as needed to provide the service; transfers for Google Analytics are based on the consent you give in the cookie banner.
Retention
Data is kept for as long as the purpose requires and for the periods required by law, then deleted, destroyed or anonymised. Account data is kept while your account is open and deleted within 30 days of a deletion request. Detailed periods are in the Privacy Policy.
Your rights (KVKK art. 11)
- Learn whether your personal data is processed,
- Request information about it if it is,
- Learn the purpose of processing and whether data is used for that purpose,
- Know the third parties in Turkey or abroad to whom it is transferred,
- Request correction if it is incomplete or inaccurate,
- Request deletion or destruction under the conditions in Article 7 of the KVKK,
- Request that corrections, deletions and destructions be notified to third parties the data was transferred to,
- Object to a result against you arising solely from automated analysis of the data,
- Claim compensation if you suffer damage from unlawful processing.
How to apply
To exercise your rights, you can apply in line with the Communiqué on the Procedures and Principles of Application to the Data Controller:
- From the email address registered to your account, to destek@kadansapp.com
Please include your full name, your Turkish ID number if you are a Turkish citizen (otherwise your nationality and passport number), an address or email for our reply, and your request. We conclude requests free of charge within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find our reply insufficient or we do not reply in time, you can complain to the Board.
You can also correct or delete your profile information yourself on the Profile page of your account.