Privacy Notice

Data controller

Depom Ltd (“we”), which operates Hadi Taşın, is the controller of your personal data. Company number 17164981; registered address 5 Mayfair Avenue, Salford, M6 8AF, United Kingdom.

You can reach us about anything to do with your personal data at support@haditasin.com.

What we process

• Identity and contact: your name, e-mail address and phone number. We never ask for a Turkish ID number.
• Account security: your password, stored in a form that cannot be read back, the encrypted secret of two-step sign-in if you set it up, sign-in times and the IP addresses of sign-ins.
• Your move: the addresses at both ends (province, district, street, postcode), the day and time window, floors and lifts, what is moved, the services you ask for (such as packing, dismantling and assembly) and your notes.
• Photos: if you add photos of your things, the stairs or the entrance, we redraw each one and remove its location (GPS) and camera details.
• For movers: company name, tax number, address, authorised person, K3 authorisation certificate and verification documents, vehicles, branch towns and addresses.
• Marketplace activity: quotes, bookings and the transport contract record, in-app messages, reviews, disputes and support requests.
• Driver location: the phone’s location when a mover’s driver opens the link they were sent and chooses to share it. We keep the latest position only.
• Device: your phone’s notification key (push token), operating system, and the app’s language and version, so that we can send you notifications.
• Visit records: the approximate province and town your IP address resolves to while you use the website or the app, the kind of device (phone, tablet, computer), the pages you open, the site you came from and the times of your visits. We do not keep the IP address itself in this record; the records are deleted after 30 days.

Why we process it

• To open and run your account; to publish your move, pass on quotes, and create the booking and the transport contract record.
• To carry messages between the parties and send in-app notifications; to send e-mails about account security (such as a password reset).
• To verify movers’ companies and K3 certificates; to prevent fraud and abuse and keep the platform safe.
• To measure a move’s distance and show an estimated price range.
• Seeing from which provinces and on which devices the website and the app are used, and improving the service with it.
• To show reviews and movers’ track records; to settle disputes and support requests.
• To meet our legal obligations and answer lawful requests from public authorities.

Legal grounds and how we collect it

We collect your data through the app, the haditasin.com website, e-mail and support requests, partly by automated means (device and security records, for example).

We process your data on these grounds in Article 5 of the KVKK: entering into or performing a contract, for your account, move, quotes, bookings and the transport contract record; our legal obligations, for security records, invoices and official requests; establishing, exercising or defending a right, in disputes; and our legitimate interest, provided it does not harm your fundamental rights and freedoms, for verification, fraud prevention and platform security.

Notifications and driver location depend on the permission you give on your phone; you can withdraw it at any time in your phone’s settings.

Who sees it and to whom it is transferred

• The public marketplace: only the district and province, the day of the move (not the time), floors and lifts, a summary of what is moved, services, distance and the quote deadline. Your name, address, phone, photos and notes are never shown; you can take your move off the marketplace at any time.
• Movers: photos are seen only by movers with an approved K3 certificate who may quote. Your full address and phone number go only to the mover whose quote you accept.
• A mover never sees another mover’s price or how many quotes there are.
• The customer sees a quoting mover’s company name, rating and branch towns; never a branch’s address or phone.
• Our service providers, only on our instructions and as far as the service needs: hosting and e-mail delivery (GNET İnternet Telekomünikasyon A.Ş. — Güzel Hosting), phone notifications (Google Firebase Cloud Messaging: the notification key with the notification’s title and text), road distance (Google Maps Platform: addresses only; no names or phone numbers).
• Where the law requires or allows it, competent public authorities, courts and our legal advisers.

We do not sell personal data or use it for advertising.

Transfers abroad

Our servers are in Frankfurt, Germany, where your data is stored. Phone notifications are delivered through Google’s servers and may be processed outside Türkiye.

We make transfers abroad under the safeguards in Article 9 of the KVKK (such as standard contracts).

How long we keep it

• Account and company details: while the account is open. When an account is deleted, we anonymise its personal details.
• Move photos: deleted 30 days after the move is completed or the listing closes without a booking; kept until a dispute is closed if there is one.
• Messages: their text and attachments are deleted two years after the listing they belong to closes.
• Driver location: deleted when the move ends or the link expires, at the latest 14 days after the link was created.
• Notification key: deleted when you sign out of the app, reset your password, or Google reports that the key is no longer valid.
• Bookings, transport contract records and invoices: for the limitation and retention periods set by the applicable law.
• Server logs: 30 days. Backups: 14 days.

Your rights under Article 11 of the KVKK

• to learn whether your personal data is processed and, if so, to ask for information about it,
• to learn the purpose of processing and whether it is used for that purpose,
• to know the third parties in Türkiye or abroad to whom it is transferred,
• to ask for it to be corrected if it is incomplete or wrong,
• to ask for it to be erased or destroyed under the conditions of Article 7 of the KVKK,
• to ask for corrections, erasure and destruction to be notified to the third parties it was transferred to,
• to object to an outcome against you that results solely from automated analysis,
• to claim compensation if you suffer damage because of unlawful processing.

How to apply

Send your request in writing to our registered address (5 Mayfair Avenue, Salford, M6 8AF, United Kingdom), or write to support@haditasin.com from the e-mail address registered on your account. You can also ask for your account to be deleted in the app’s account settings.

We may ask for more information to confirm your identity. We answer within 30 days at the latest, free of charge; if answering has a separate cost, we may apply the fee set by the Personal Data Protection Board. If your request is refused, you find the answer insufficient, or we do not answer in time, you may complain to the Board.

Security and changes

We receive your data over encrypted connections, limit access to our authorised team and keep a record of access. If a breach affects your data, we notify the Board and you within the time the law sets.

When we change this notice we publish the new version here and announce important changes in the app.