Loading...

0551 044 08 69 ekip@racoun.com
27 Ekim 2026 · Racoun

How to prepare a KVKK privacy notice: step by step

A KVKK privacy notice explains, in clear language, who the data controller is, why and on what legal basis data is processed, to whom it may be transferred, how it is collected and the individual’s rights. It should be tailored to each group and kept separate from consent.

A KVKK privacy notice (aydınlatma metni) informs people, at the moment their data is collected, about how it will be used. The obligation applies whether or not consent is needed.

  • Required elements: identity of the data controller, purposes of processing, recipient groups and transfers (including abroad), collection method and legal basis, and the data subject’s rights with a way to apply.
  • Steps: build a data inventory, separate groups (customers, employees, candidates, visitors, website users), match each data category to a purpose and legal basis, list recipients, write plainly, show how to apply, present the notice at the right place and keep it updated.
  • Keep notice and consent separate: the notice informs; explicit consent is a permission needed only when no other legal basis applies.

Websites need notices next to each form plus cookie management. Keep records proving the notice was shown. This is general information; have final texts approved by your lawyer. Racoun delivers websites with KVKK-compliant forms and cookie management, and Racurity supports the technical side of compliance.

Talk to Racoun: we are based in Istanbul and work with brands across Türkiye. Message us on WhatsApp or email ekip@racoun.com.