Legal
KVKK Privacy Notice
Effective date: 1 May 2026
1. Data Controller
This notice has been prepared in accordance with Article 10 of Türkiye's Personal Data Protection Law No. 6698 (“KVKK”) by Clearmont Digital LLC and group companies operating under the MindHUB brand (together, “MindHUB” or “Data Controller”) for our members, visitors, business partners and prospective members.
MindHUB takes utmost care to protect the personal data it processes in the context of the coworking, virtual office and meeting room services provided at its Esentepe and Maslak locations. Contact: kvkk@themindhub.co
2. Categories of personal data we process
During membership application: name and surname, Turkish ID number (where legally required), contact details, tax and company info, billing address, bank/payment details; during membership: card access logs, meeting room reservations, event attendance records; CCTV recordings operated 24/7 in our buildings (entry-exit and common areas; not inside private offices); technical data collected via cookies on our website; and communication traffic logs (email, WhatsApp, phone) recorded upon request.
3. Purposes of processing
(a) Conclusion and performance of the membership agreement — card-access setup, room reservations, invoicing, member dashboard.
(b) Physical security of our premises and members — CCTV, visitor logs, night-shift logs.
(c) Compliance with legal obligations — tax law, KVKK, Law No. 5651 (internet traffic logs), MASAK regulations.
(d) Marketing communication, subject to your explicit consent — member-only events, new service announcements, community newsletters.
(e) Customer relationship management and service quality improvement — feedback analysis, member satisfaction measurement.
4. Legal grounds
Your personal data is processed under KVKK Art. 5/2 on the grounds of: (i) being directly related to the conclusion or performance of a contract, (ii) compliance with our legal obligation, (iii) establishment, exercise or protection of a right, (iv) our legitimate interest, provided your fundamental rights and freedoms are not harmed.
Marketing communications, publication of event photos on corporate channels and special categories of data (health data, where applicable) are processed based on your explicit consent under KVKK Art. 5/1 and 6/2; you may withdraw your consent at any time.
5. Recipients
Your data is shared, limited to: (i) our business partners — payment providers (iyzico, Stripe), cloud service providers (AWS, Google Cloud), e-invoice integrator, independent accounting firm; (ii) our legal advisors and independent auditors; (iii) competent public authorities (courts, tax authority, MASAK) where legally required.
You may request information on which data is shared and request deletion of data that you can remove from your member dashboard.
6. International transfers
Due to our cloud infrastructure, some of your data may be processed in AWS Frankfurt (Germany, EU), Google Cloud EU region and Microsoft 365 EU data centres. These transfers are made to countries deemed to provide adequate protection by the Data Protection Board, or under standard contractual clauses (SCCs). We do not request a separate explicit consent for transfer outside the EU; however you may request information at any time.
7. Retention periods
Contract data: 10 years from end of membership (per TCC and Tax Procedure Law).
Event photos and social media content: 3 years (unless consent withdrawn).
CCTV recordings: 30 days (unless a legal request is in place).
Communication traffic logs: 2 years (KVKK and Law No. 5651).
Marketing communication records: until consent withdrawn or 5 years.
8. Your rights (KVKK Art. 11)
Under KVKK Art. 11 you have the right to: (a) learn whether your personal data is processed, (b) request information if it is processed, (c) learn the purpose and whether your data is used in line with that purpose, (d) know third parties to whom your data is transferred in Türkiye or abroad, (e) request correction if incomplete or inaccurate, (f) request deletion or destruction under the relevant provisions of KVKK, (g) request notification of such correction/deletion to third parties to whom your data was transferred, (h) object to a result against you arising solely from automated analysis, (i) claim compensation for damage caused by unlawful processing.
9. How to apply
You may submit your application by sending a wet-signed petition or a securely e-signed request to kvkk@themindhub.co. For postal applications: Clearmont Digital LLC — KVKK Unit, Esentepe Quarter, Büyükdere Ave. No:122, 34394 Şişli/Istanbul.
Your application will be concluded free of charge within 30 days at the latest under KVKK Art. 13, subject to its nature. A fee may be requested for transactions specified in Article 7 of the Communiqué on Procedures and Principles of Application to the Data Controller.
If you are not satisfied with our response, your right to file a complaint with the Personal Data Protection Board under KVKK Art. 14 is reserved.
This notice is periodically updated; material changes are announced on the member dashboard and via kvkk@themindhub.co.