Data requests
The right recipient for your request, what to include, and the deadlines that apply.
1. Choose the right recipient first
provengine is a controller for some data and a processor for other data (the distinction is here). Sending your request to the right place determines how quickly it can be resolved.
| If your request concerns | Send it to |
|---|---|
| Your account, email address, session, account deletion | provengine — the channels on this page |
| Your task records, answers, photos, performance reports | The organisation that employs you (the controller); provengine acts on its instructions |
| Your visit to this website | provengine |
2. What you can do right now in the app
Several rights can be exercised immediately from the account screen:
- Download your data. The export gives you your profile, memberships, task and answer records, comments, notification preferences and consent records in a machine-readable (JSON) format.
- Correct your details. First name, last name, language and time zone are editable on the profile screen.
- Delete your account. A deletion request is held for 30 days and can be cancelled in that window. If you are the last owner of an organisation you must transfer it first.
- Turn off notifications. Settings > Notifications.
3. Written request
For anything not covered above, please include in your request: your name, the address or email address to which the reply should be sent, the subject of the request, and any documents supporting it. We may ask for information that lets us confirm your identity — answering a data request to the wrong person would itself be a breach.
- Legal name
- __TICARET_UNVANI__
- Address
- __ADRES__
- Tax office / number
- __VERGI_DAIRESI_VE_NO__
- Trade registry (MERSİS)
- __MERSIS_NO__
- Data controllers' registry (VERBİS)
- __VERBIS_NO__
- __KVKK_EPOSTA__
- Phone
- __TELEFON__
- EU representative (GDPR Art. 27)
- __AB_TEMSILCISI__
Requests are answered within 30 days. Where a request is manifestly unfounded or excessive, a reasonable fee may apply. To prevent abuse, a single user may create at most three data exports in any 30-day period; a request over that limit is refused and earlier exports remain downloadable.
4. If your request is refused
If your request is refused, the response is inadequate, or no response arrives in time, you may lodge a complaint with the supervisory authority of your member state (GDPR Art. 77) or, in Türkiye, with the Personal Data Protection Board within 30 days of learning of the response and in any case within 60 days of the request (KVKK Art. 14).