PitStop Startup Application — Privacy Notice (KVKK)

• Your application is read by the PitGrowth team, who may call you. People make the decision.
• No automated decision is made about you. There is no profiling and no scoring algorithm.
• Not being picked for one session does not delete your application. Applications stay in a standing pool and are considered for later sessions.
• The content of your application is not shared with other companies.
• Your data is stored on servers in Frankfurt, Germany, and is accessed by the data controller, which is incorporated in the United States. So there is a transfer abroad; details below.
• If you want your application deleted, one email to team@pitgrowth.com is enough.

PitGrowth LLC (incorporated in the United States).

Address: 4 Peddlers Row, Newark, DE 19702, United States.

For requests and questions: team@pitgrowth.com

Requests are concluded within 30 days at the latest.

What you enter in the form:

• Full name, email address, phone (optional)
• Company name, product/website address (optional)
• Target industry (chosen from a fixed list of 42)
• Your six-month plan (free text)

What the system records automatically:

• The language of the form and the link you arrived through (campaign/utm information)
• The version of the notice you read, the time you confirmed it, and the time of submission

If you are signed in to PitGrowth, additionally:

• Your user and company identifiers, plus a snapshot of your company profile at the moment you applied

• To evaluate your application and select the six companies that will present at a session
• To contact you during the process and about the outcome
• To keep your application in the pool so it can be considered for later sessions

We do not use your application as a marketing list, and we do not sell or hand it on to third parties.

• Evaluating the application and contacting you: KVKK Art. 5/2-(c). The application is a pre-contractual step towards a presenting relationship, and these data are directly related to establishing and performing it.
• Keeping the application in the pool and keeping a record of the process: KVKK Art. 5/2-(f), legitimate interest, provided your fundamental rights are not harmed.
• This form does not rely on your explicit consent. That is why there is no "I give my explicit consent" box; the checkbox only confirms that you have read this notice.

Data is collected electronically, through the form on pitgrowth.com, filled in by you. If you are signed in, the profile information we already hold is attached to the form. We do not collect data from other sources.

Selection is done by hand: the team reads the applications and speaks to applicants by telephone. There is no automated screening, scoring or profiling.

KVKK Art. 11 gives you the right to object to an adverse outcome produced solely by automated analysis. No such automated decision is produced in this process.

• Data is stored on Supabase, on AWS servers in the Frankfurt region (Germany, eu-central-1).
• The site runs on Vercel infrastructure. Emails to you are sent through a third-party email provider.
• Because the data controller is incorporated in the United States, the data is also accessed from the United States.
• Your personal data is therefore transferred abroad within the meaning of KVKK Art. 9. The legal mechanism relied on for that transfer: [to be completed with counsel before publication].
• The content of your application is not transferred to presenting companies or any other third party. It may be shared with competent public authorities only where the law requires it.
• For our infrastructure and general privacy practices: /legal/privacy-policy

• We keep your application for 24 months from the date you submit it.
• If you present at a session within that period, records relating to that presentation are kept for 24 months from the presentation date.
• At the end of the period the record is deleted or irreversibly anonymised.
• To have it deleted sooner, write to team@pitgrowth.com; we conclude such requests within 30 days.

Under KVKK Art. 11 you may:

• Learn whether your personal data is processed, and request information if it is
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties to whom the data is transferred, in Türkiye or abroad
• Request correction if the data is incomplete or inaccurate
• Request erasure or destruction
• Request that correction, erasure and destruction be notified to third parties the data was transferred to
• Object to an adverse outcome produced solely by automated analysis
• Claim compensation for damage caused by unlawful processing

For requests: team@pitgrowth.com. We reply within 30 days at the latest. If you are not satisfied with the outcome, you may complain to the Turkish Personal Data Protection Board (KVK Kurulu).

• The Turkish version of this notice is the operative one. This English version is a courtesy translation; in case of conflict, the Turkish text applies.
• The version of the notice you read and the date you confirmed it are stored with your application. If the notice changes, the new version is published on this page.
• This notice covers the startup application form only. For site-wide information see /legal/privacy-policy