KVKK Disclosure Notice

Pursuant to Article 10 of Law No. 6698, this disclosure notice is provided by Emir Efe ÖNAL as the data controller for the website and services operated under pdfto.net.

1. Identity of the Data Controller

• Data Controller: Emir Efe ÖNAL
• Contact E-mail: legal@pdfto.net

2. Categories of Personal Data Processed

Depending on how you use the service, pdfto.net may process the following categories of personal data:

• Uploaded files: the content of files you upload for compression, conversion, extraction, or export.
• File metadata: file name, file type, file size, selected tool, task status, and download status.
• Technical and security data: IP address, request metadata, session identifiers, and server-side logs.
• Contact data: information you provide if you contact pdfto.net directly.

3. Purposes of Processing

Personal data may be processed for the following purposes:

• to provide the document processing tool you request;
• to receive, queue, validate, process, and deliver uploaded files;
• to apply technical limits such as file-type restrictions, file-size limits, page limits, queue rules, and one active task at a time;
• to maintain service security, detect misuse, prevent abuse, and troubleshoot technical issues;
• to fulfill legal obligations and respond to lawful requests from competent authorities;
• to establish, exercise, or protect legal rights where necessary.

4. Legal Grounds for Processing

Under Law No. 6698, personal data may be processed on one or more of the following legal grounds, depending on the specific activity:

• processing is expressly permitted by law;
• processing is necessary for the establishment or performance of a contract or service relationship;
• processing is necessary for the data controller to comply with a legal obligation;
• processing is necessary for the establishment, exercise, or protection of a right;
• processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed;
• explicit consent, where explicit consent is required by law for the relevant processing activity.

5. Method of Collection

Personal data is collected directly from:

• the website interface and upload forms;
• technically necessary cookies and similar technologies used for secure operation;
• server-side technical and security logs;
• direct communications sent to the contact e-mail address.

6. Transfers of Personal Data

Personal data may be transferred, to the extent necessary and in accordance with applicable law, to the following categories of recipients and for the following purposes:

• hosting and infrastructure providers, for the purpose of operating, securing, and maintaining the service;
• frontend asset providers, such as providers of fonts or frontend libraries requested directly by the browser, for the purpose of rendering the website interface;
• competent public authorities, courts, regulators, or law enforcement bodies, where disclosure is required by law or necessary to exercise or protect legal rights.

The primary application server used for pdfto.net is hosted in Germany.

7. Retention Period

pdfto.net processes files on a temporary basis and does not provide permanent storage.

• Uploaded files and processed files are kept only for temporary processing and download delivery.
• If a processed file is downloaded, the downloadable output is deleted immediately after delivery.
• If no download takes place, temporary files are deleted from the server no later than 2 hours.
• Certain technical and security records may be retained for the limited period reasonably necessary for queue handling, error handling, security, and legal obligations.

8. Rights of the Data Subject Under Article 11

Under Article 11 of Law No. 6698, and subject to the conditions set out in the law, you may request to:

• learn whether your personal data is being processed;
• request information if your personal data has been processed;
• learn the purpose of processing and whether it is used in accordance with that purpose;
• learn the third parties to whom personal data is transferred, in Türkiye or abroad;
• request correction of incomplete or inaccurate personal data;
• request deletion or destruction of personal data where the legal conditions are met;
• request notification of correction, deletion, or destruction to relevant third parties where applicable;
• object to a result against you arising exclusively from automated analysis of processed data;
• request compensation for damage suffered due to unlawful processing.

9. How to Submit a Request

Requests relating to your rights under Law No. 6698 may be submitted to:

• E-mail: legal@pdfto.net

To protect personal data and verify identity, pdfto.net may request additional information where reasonably necessary before responding to a request. Requests will be handled in accordance with the applicable legal procedure and time limits under Law No. 6698.