In short: Backed-up content is encrypted before it leaves the device. Kladim cannot read the encrypted file and database content.
1. Data controller and data processor roles
Under Law No. 6698 on the Protection of Personal Data, FARZANEH ABDOLLAHPOUR DEHSHAL (Kladim Cloud Backup) is the data controller for account, contact, billing and the technical data required for the service to function. For content backed up by the user, Kladim acts as the data processor providing the service; primary responsibility for the content rests with the user. Address: Necip Fazıl Kısakürek Mah. Yunus Emre Cad. No: 71 İç Kapı No: 2 Esenyurt/İstanbul · Tax Office / No: Esenyurt V.D. – 99516786898.
Contact: +90 850 885 00 42 · info[at]kladim.com · farzanehabdollahpour.dehshal[at]hs09.kep.tr
2. Categories of data processed
- Account and contact: First name, last name, email and billing details.
- Transfer contact data: Email addresses entered in Kladim Transfer for sending or notification are not anonymous; they are retained for the relevant communication and legal retention periods.
- Service metadata: File name, path, size, operation time, backup status and security logs.
- Encrypted user content: Backed-up files and databases are stored in encrypted form for the purpose of providing the service.
- Operational security and legal logs: IP address, User-Agent, sessions and access times may be processed in server/infrastructure logs for security, attack detection and obligations under Law No. 5651. Application analytics is retained with pseudonymous codes only after an explicit choice.
This data is collected electronically through the website, mobile/desktop applications, support requests and payment processes, based on the following legal grounds: the formation and performance of the contract, the secure provision of the service, compliance with legal obligations, and legitimate interest.
3. Zero-knowledge approach
User content is transferred and stored encrypted. Safeguarding the key that decrypts the content is the user's responsibility. Kladim does not use encrypted content for advertising, profiling or content analysis.
4. Retention and destruction
Data is retained for the duration of the service relationship and for periods required by applicable law. Transfer contact emails are retained for the relevant communication and legal retention periods. After a subscription or trial ends, user content is deleted from operational systems within 30 days, subject to the applicable agreement and legal obligations.
5. Transfer and sharing
Personal data is not sold. It may only be shared for the purpose of providing the service, infrastructure security, legal obligations, or lawful requests from authorized authorities, and always with the necessary security measures. Contact taleplerinin ayrıntıları yalnızca Kladim'in MySQL sisteminde saklanır. Yeni bir talep oluştuğunda Telegram'a kişisel veri içermeyen operasyon bildirimi gönderilebilir; ayrıntılar yalnızca yetkili yönetici panelinde görüntülenir.
6. Rights under the Data Protection Law (KVKK)
Under Article 11 of Law No. 6698, you have the right to: learn whether your personal data is being processed, request information about it if so, learn the purpose of processing and whether it is used in accordance with that purpose, know the third parties to whom your data has been transferred domestically or abroad, request correction if it is incomplete or inaccurate, request deletion or destruction once the reasons requiring its processing no longer apply, request that correction or deletion be notified to the third parties to whom the data was transferred, object to a result arising against you solely from automated analysis of your data, and request compensation for damages suffered due to unlawful processing. You can exercise these rights via destek[at]Kladim.com or farzanehabdollahpour.dehshal[at]hs09.kep.tr.
Last updated: 14 Ağustos 2026