International transfer of personal data
Sending personal data to a recipient outside the country where it is held, or storing it on a server abroad; KVKK and the GDPR set separate rules for it.
- 01
Why it matters
Using e-mail, cloud, CRM and analytics services hosted abroad often means transferring data abroad. The 2024 amendment to KVKK introduced safeguards such as adequacy decisions, standard contracts and binding corporate rules; when a standard contract is signed, the Authority must be notified.
- 02
Example
A company moves its customer records to a CRM hosted in the EU. As the basis for the transfer it signs a standard contract with the provider, notifies the Authority and adds the transfer to its privacy notice.
- 03
Common mistake
Not knowing where the services you use keep the data. Even a free form tool or chat widget may be sending data abroad; the inventory should record each service's location.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.