This policy explains what personal data this website collects, why, who processes it and what your rights are. It applies to hakancaba.com in English and Turkish.
Who I am
The data controller is Hakan Caba, a self-employed professional based in Ataşehir, İstanbul, Türkiye. Contact: [email protected]. My full postal address is available on request by email, for example if you want to send a written request.
What I collect
- Contact form: your name, email address, subject and message.
- Emails and WhatsApp messages you send me, and my replies.
- Technical data: when you visit, the hosting and network providers process your IP address, browser type and the pages requested, in server logs used for delivery and security.
- Visit statistics: Cloudflare Web Analytics counts page views without cookies and without building a profile of you. I only see totals, such as how many people read a page.
- Client records: if we work together, the details needed for the project, the quote and the receipt.
Please don't send sensitive data (health, finances, passwords) through the form.
Why I use it
- To reply to your message and prepare a quote.
- To carry out and document work we agree on.
- To keep the website running and secure.
- To understand which pages are useful, in aggregate.
- To meet tax and accounting obligations.
Legal bases (GDPR)
For visitors in the EU and EEA: steps before a contract at your request, Art. 6(1)(b); legitimate interests in answering enquiries, site security and aggregate statistics, Art. 6(1)(f); and legal obligations such as keeping tax records, Art. 6(1)(c). For Turkish law, see the KVKK Notice.
Cookies and browser storage
This site does not use advertising or analytics cookies, so there is no cookie banner. Your browser's local storage remembers your language choice (English or Turkish). It stays on your device. Cloudflare may set a strictly necessary security cookie if it needs to check for bots. If I ever add optional cookies, I will ask for your consent first and update this page.
Who processes the data
- Hostinger International Ltd. (Cyprus): website hosting and sending form emails.
- Google (Google Workspace): email.
- Cloudflare, Inc. (US): DNS, security and cookieless visit statistics.
- WhatsApp / Meta: only if you choose to message me there.
- My accountant and public authorities, when the law requires it.
I don't sell personal data or share it for advertising.
International transfers
Some providers process data outside your country, including in the United States. Where GDPR applies, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. For transfers from Türkiye, see the KVKK Notice.
How long I keep it
- Enquiries that don't become projects: 24 months after our last contact.
- Client records: 10 years from the end of the year they were created (tax law and limitation periods).
- Server logs: as long as the hosting and network providers keep them, usually a short period.
Your rights
Depending on where you live, you can ask to access, correct or delete your data, restrict or object to its use, or receive it in a portable format. EU and EEA residents can complain to their data protection authority. Residents of Türkiye have the rights in Article 11 of the KVKK. California residents can ask what personal information I collect and how it is shared. I don't sell personal information.
Send requests to [email protected]. I reply within one month, or within 30 days for KVKK requests.
Do Not Track
This site doesn't track you across other websites, so browser "Do Not Track" signals don't change how it works.
Children
This site is meant for business owners and is not directed at children under 16.
Other websites
Articles link to Etsy, Shopify, Google and other sites. Their own privacy policies apply there.
Changes
When this policy changes, I update the date at the top of the page.