ROKMARKT EXPLICIT CONSENT TEXT FOR PROCESSING AND TRANSFER OF PERSONAL DATA

Initial Effective Date: 23 November 2025 Last Updated / Published: 29 May 2026 Version: 2026-05-29

Data Controller: İsmail Hakkı GÜNDÜZ (Rokmarkt platform operator) – Eskişehir, Türkiye

Contact: [email protected]

This English text is provided for information purposes. In case of any discrepancy, the Turkish version shall prevail.

This Explicit Consent Text has been prepared for data processing activities within the scope of rokmarkt.com (the “Platform”) that require explicit consent and are not based on other legal grounds explained in the KVKK Information Notice.

Basic use of the Platform, account creation, login operations, viewing listings, creating listings or resource orders, responding to support requests, sending mandatory system e-mails, keeping security records and fulfilling legal obligations may be based on legal grounds such as establishment or performance of a contract, legal obligation, establishment/exercise/protection of a right or legitimate interest, as explained in the KVKK Information Notice. Explicit consent is not mandatory for these core operations.

The explicit consent options below are fully optional. Refusing to give consent or withdrawing consent later does not prevent you from using the core functions of the Platform. You may withdraw your explicit consent at any time via [email protected] or through the mechanisms provided in your account settings.

A) Explicit Consent for Marketing and Campaign Communications

If I give explicit consent, I consent to the processing of:

  • my e-mail address,
  • my username,
  • records relating to my marketing permission and communication preference

by Rokmarkt for the purpose of sending campaigns, announcements, feature updates, information notices and similar marketing content by e-mail.

Within this scope, my personal data may be shared with Brevo or similar e-mail service providers only for sending marketing communications and carrying out technical delivery processes.

This explicit consent is fully optional. Refusing to give consent or withdrawing consent later does not prevent me from using the core membership, listing viewing, listing creation, resource order or support functions of the Platform.

B) Explicit Consent for Cross-Border Transfer of Personal Data Where Required

As explained in the KVKK Information Notice, technical service providers such as Vercel, Neon PostgreSQL, MongoDB Atlas, Cloudflare, Cloudflare R2/CDN, Brevo, Upstash Redis, Google OAuth, Cloudflare Web Analytics and Vercel Speed Insights may be used for the operation of the Platform. The servers of these providers may be located abroad or such providers may access data from abroad.

For data processing activities requiring cross-border transfer, the necessary legal conditions, appropriate safeguards, standard contractual clauses or other transfer mechanisms under Article 9 of the KVKK are evaluated separately.

Where my explicit consent is required and no other transfer mechanism can be applied, I give my explicit consent for my identity and account data, contact data, listing and order data, technical/log data and support records to be transferred abroad to the above-mentioned or similar technical service providers only for the purposes of operating the Platform, ensuring security, sending e-mails, media storage, CDN, rate-limiting, social login, basic analytics and performance measurement.

I have been informed that such transfer may mean that my data is processed in or becomes accessible from countries outside Türkiye, and that the level of personal data protection in such countries may not be identical to the level of protection in Türkiye.

I understand that I may withdraw this explicit consent at any time, and that withdrawal does not affect the lawfulness of transfers carried out before the withdrawal.

C) Withdrawal of Consent and My Rights

I understand that I may withdraw my explicit consent at any time without providing any reason. Withdrawal of consent does not affect the lawfulness of data processing activities carried out before the withdrawal date.

I may withdraw my explicit consent via [email protected] or through the mechanisms provided in my account settings.

I understand that I may exercise my rights under Article 11 of the KVKK by contacting [email protected] or through other methods specified under KVKK and relevant legislation. Requests are concluded as soon as possible and within 30 days at the latest, depending on the nature of the request.