This notice is given under Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK). The Turkish version is the binding text. For a general overview, see the Privacy Policy.
Data controller
Hakan Caba, self-employed, Ataşehir, İstanbul, Türkiye. Email: [email protected]. The full postal address is provided on request by email.
Data, purposes and legal grounds
- Contact form, email and WhatsApp messages (name, email, message content): to answer enquiries and prepare quotes. Legal ground: steps directly related to a contract, Art. 5(2)(c), and legitimate interest, Art. 5(2)(f).
- Technical data (IP address, browser, pages requested): for site delivery and security. Legal ground: legitimate interest, Art. 5(2)(f).
- Client records (identity, contact, project and payment details): to perform the contract and keep tax records. Legal grounds: Art. 5(2)(c), legal obligation Art. 5(2)(ç), and establishing or defending a right Art. 5(2)(e).
The site uses no analytics or advertising cookies, so no explicit consent is requested.
How data is collected
Electronically, through the contact form, email, WhatsApp and automatically in server logs.
Transfers
In Türkiye: to my accountant and to public authorities when the law requires. Abroad: to Hostinger International Ltd. (hosting), Google (email), Cloudflare, Inc. (DNS, security, cookieless statistics) and WhatsApp/Meta if you write to me there. Transfers abroad are made in line with Article 9 of the KVKK.
Retention
Enquiries that don’t become projects are deleted 24 months after the last contact. Client records are kept for 10 years from the end of the year they were created.
Your rights (Article 11)
You may ask whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, ask for correction, deletion or destruction, ask that these steps be notified to third parties, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.
How to apply
In writing (the postal address is sent on request), by registered electronic mail (KEP), with a secure electronic or mobile signature, or by email from an address you have previously given me, to [email protected]. Requests are answered free of charge within 30 days, unless the process requires an extra cost under the Board’s fee schedule. If your request is refused or unanswered, you may complain to the Personal Data Protection Board.