Sharing Notice and Explicit Consent Text

1. Sharing notice (publishing a project request) — not explicit consent

In the last step of the project request wizard, you are asked to tick the following box, which is not pre-ticked:

My contact details (name, phone, email), my full address if I entered it, and the documents I uploaded will be shared with each document-verified firm that unlocks this project request, for this project only, so that they can contact me and, if they wish, submit bids.

• Why is there a box? To record that you clearly know what the sharing involves before publication. The box is a notice and a statement of your request; it is not a declaration of explicit consent within the meaning of KVKK.
• Legal ground: the service you ask Ufkon for is that firms interested in your project can reach you. Sharing is therefore necessary to perform the service you requested (KVKK Art. 5/2-c). If you do not want it, it is enough not to publish the project request, or to close it.
• With whom: every document-verified firm that spends credits, based on project size, to unlock your project request. There is no cap on the number of firms; each firm can unlock a request only once, and firms in the same corporate group count as one firm. You see every unlock in your request file. Once you close your request, no new unlocks are possible.
• Purpose and limits: only so that they can contact you about this project, write to you on the platform and, if they wish, submit bids. The firm is a separate data controller for this information; it may not use it for other purposes or sell or transfer it to third parties. A breach may lead to suspension of the firm's role on the platform.
• More information: KVKK Privacy Notice, Investors section.

2. Explicit consent text: listing in the public firm directory

This consent is only for company accounts and is entirely optional. Unlocks, project request matching and other services work independently of the directory.

• Data processed: company name (for a sole proprietorship the trade name contains the owner's name and is therefore personal data), service provinces, capacity range and accepted scope of work, the number of project requests unlocked and bids given (only as a range), badges and the company logo if any.
• Not published: phone, email, address, website, tax ID number, names of persons, the trust score number, disputes and customer reviews.
• Purpose: presenting your firm on a public directory page of the Ufkon site.
• Recipients: the page is public on the internet and may be indexed by search engines.
• Who can give it: only the company owner. The consent is recorded against the version of this text in force, as shown on the page.
• Withdrawal: you can withdraw your consent with one click on the firm directory page in your dashboard; the page is taken down. Copies in search engine caches are subject to the search engine's own update process.

Consent is given by ticking the separate explicit consent box, which is not pre-ticked, on the firm directory page; the firm is not listed unless the box is ticked.

3. Campaign and announcement messages

Your explicit consent for campaign and announcement messages is asked in a separate text, per channel and with boxes that are not pre-ticked: Commercial Electronic Messages Consent.

4. Processing for which we do not ask explicit consent

The following processing relies on another legal ground, so your explicit consent is not asked; details are in the privacy notice:

• sharing contact details with the firms that unlock a request (Art. 5/2-c);
• hosting the server in Germany (EU) and using Cloudflare for bot protection (transfer abroad, KVKK Art. 9/4-c standard contract);
• strictly necessary and functional cookies (Cookie Policy);
• account security and abuse prevention (Art. 5/2-f).

5. Recording and withdrawing consent

Every approval and consent is recorded with the date, the version of the text, the screen and connection details. Withdrawing consent is as easy as giving it and takes effect for the future; the withdrawal is also kept as a separate record. You can see your records and permissions on the Privacy and my data page in your dashboard. For questions: info@ufkon.com.

Effective: the date of publication. This English text is a courtesy translation; the Turkish version is the binding text.