Personal Data Protection Notice

1. Purpose and scope

This Personal Data Protection Notice is prepared to inform users of www.beyazyakalidan.com, a LinkedIn-based professional C2C marketplace, about personal data processing activities. The notice covers visitors, registered users, sellers, buyers, message senders, and users who interact with company-based filters.

2. Data controller and contact

The service is operated under the BeyazYakalıdan brand by Hgerman. For privacy, data protection, or account-related requests, you can contact us at info@hgerman.pl.

3. Collection methods

Personal data may be collected directly from you through forms, listings, messages, photos, and support requests; automatically through cookies, session records, log records, IP information, browser/device data, and security events; and from LinkedIn during LinkedIn sign-in and, where permitted, verified current workplace synchronization.

4. Categories of personal data processed

• Identity and contact data: name, surname, email address, LinkedIn profile identifier, profile photo, and profile URL.
• Professional data: current company, company identifier or page reference, job title, company verification status, and verification source.
• Account and transaction data: account creation date, listing records, favorites, reports, message history, listing status, and moderation notes.
• Listing content: product title, description, category, condition, city, price, currency, uploaded listing photos, and related metadata.
• Security and log data: IP address, session data, authentication records, request logs, error logs, anti-forgery and cookie records.
• Communication data: messages sent through the platform, support correspondence, complaints, and administrative notifications.

5. Purposes of processing

• Creating, verifying, and securing LinkedIn-only user accounts.
• Displaying seller identity, company information, and trust signals on listings.
• Publishing, searching, filtering, editing, and moderating listings.
• Providing company-based filters and showing listings from the user's own company.
• Enabling favorites, messaging, notifications, reporting, and abuse prevention.
• Preventing fraud, unauthorized access, misleading listings, spam, and platform misuse.
• Maintaining technical infrastructure, backups, logs, service continuity, and legal records.

6. Legal bases

Depending on the processing activity, personal data may be processed because it is necessary for account and marketplace service performance, necessary for legitimate interests such as security and fraud prevention, required for legal obligations, or based on your explicit action such as uploading listing content or sending messages.

7. LinkedIn data and company verification

LinkedIn sign-in is mandatory for the platform. Standard LinkedIn login may provide basic profile and email data. Current workplace data is processed only if LinkedIn makes it available to the application with the required permissions. Where verified company data is required, manual company entry may be restricted to protect marketplace trust.

8. Transfers to third parties and service providers

Personal data may be processed by infrastructure, hosting, storage, security, monitoring, email, and support service providers to operate the platform. This includes Microsoft Azure services for database and blob storage, LinkedIn for authentication, and other technical providers used only as necessary for the service.

9. International transfers

Because the service uses global cloud and identity providers such as Microsoft Azure and LinkedIn, data may be processed in countries outside your country of residence. Where required, appropriate legal safeguards should be applied for international transfers.

10. Storage periods

Account data is kept while the account remains active. Listings, photos, messages, favorites, reports, and logs are kept for the period needed to operate the service, resolve disputes, prevent abuse, satisfy legal obligations, and maintain backups. Deleted listings and removed content may remain in logs or backups for a limited period.

11. Cookies and session technologies

Essential cookies and session technologies are used for login, language preference, authentication, anti-forgery protection, security, and service continuity. Non-essential tracking or advertising cookies should not be used unless a separate consent mechanism is implemented.

12. Your rights

Depending on applicable law, you may request information about whether your personal data is processed, access to your data, correction, deletion, restriction, objection, portability, and information about transfers. You may also contact the relevant data protection authority.

13. Application method

You may submit privacy and data protection requests to info@hgerman.pl. To protect account security, we may request additional information to verify that the request belongs to the account owner.

14. Updates

This notice may be updated when the service, LinkedIn integration, storage infrastructure, legal requirements, or data processing activities change. Updated versions become effective when published on the platform.