Explicit Consent Statement

Draft — requires review by a lawyer. This text is not legal advice; have it reviewed by a lawyer before publishing.

This statement explains the processing activities that [COMPANY_TITLE] (the “Platform”), as data controller, carries out based on your explicit consent under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). The three sections below are independent of each other; each has its own checkbox and no box is pre-ticked. Refusing consent in one section does not affect the others. In case of any discrepancy, the Turkish version prevails.

For details on how your personal data is processed, see the Privacy Notice (KVKK). You may withdraw your consent at any time from the /hesap page or by writing to [COMPANY_EMAIL]. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Each consent you give is recorded together with the text version, date and IP address for evidentiary purposes.

1. Paid sharing of chef contact details

This section applies only to users who register as chefs.

Under the Platform’s business model, clients send inquiries to chefs; after the chef accepts an inquiry, the chef’s contact details are shared with that client and messaging between the parties opens, in return for the client paying the unlock fee (capture of the pre-authorization) or using a credit.

Accordingly, I give my explicit consent for the following personal data:

• First and last name,
• Phone number,
• Email address,
• Instagram username,

to be shared only with clients whose inquiry I have accepted and who pay the unlock fee or use a credit, for the purpose of offering services and organizing the event; and for the Platform to charge the client a fee for this sharing.

I have been informed that:

• My contact details are not shown to any client before I accept an inquiry; contact details in messages are automatically masked.
• When my details are shared, I am notified which client unlocked them and for which event.
• Information obtained by the client after sharing is the client’s own responsibility.
• If I withdraw this consent, my profile is closed to new inquiries; details already unlocked by clients cannot be recalled.
• This consent is a precondition for offering services as a chef on the Platform. [lawyer to assess: whether consent tied to the service could instead rely on Art. 5/2-c KVKK, performance of a contract]

Checkbox (unticked): I give explicit consent to the paid sharing of my chef contact details as described above.

2. Commercial electronic messages

This section is optional. Not opting in does not affect your use of the Platform in any way.

Under Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, I consent to receiving promotional commercial electronic messages, such as campaigns, discounts, new features, credit packs and Chef Pro membership, at my contact details via SMS and email, and to the processing of my name, email and phone number for this purpose.

I have been informed that:

• My consent is registered in the Message Management System (İYS).
• Transactional messages such as inquiry status, payment, invoice and security notifications are sent independently of this consent.
• I may withdraw my consent at any time, without giving reasons and free of charge, via the opt-out link in messages, the /hesap page, İYS, or by writing to [COMPANY_EMAIL]. Opt-out requests are processed within 3 business days at the latest.

Checkbox (unticked): I want to receive commercial electronic messages (SMS and email).

3. Cross-border data transfer

The Platform’s technical infrastructure uses service providers established abroad. Under Article 9 KVKK, where standard contractual clauses or other appropriate safeguards are not available or not sufficient, I give explicit consent to the following transfers:

Service	Purpose	Data transferred	Region
Cloudflare	Hosting, database, file storage (R2), Turnstile bot protection	All Platform data, IP address, uploaded documents and images	Global / USA
Resend	Transactional email delivery	Name, email address, email content	USA
Sentry	Error tracking	IP address, user ID, technical error logs	USA / EU
PostHog	Usage analytics	User ID, usage events	EU
Google	Google sign-in	Name, email address, profile picture	USA
Anthropic (optional)	Translation of messages and content, contact-leak detection	Message and profile texts	USA

I have been informed that:

• Transferred data is limited to the purposes above; payment and invoicing are handled by providers in Türkiye (Iyzico, e-Archive integrator).
• If I withdraw my consent, some features requiring cross-border transfer (e.g. Google sign-in, automatic translation) may not be available. [lawyer to assess: relying on standard contractual clauses rather than consent for infrastructure transfers]

Checkbox (unticked): I give explicit consent to the transfer of my personal data to the foreign service providers listed above.