Data controller
The data controller is Ertan Efe – Şahıs Şirketi. Official notification address: Güllük Mah. Sağlık Sok. Faika Mithat Sözer İş Merkezi B Blok No:5/3 Daire:101, Adapazarı/Sakarya.
KVKK application e-mail: [email protected]. No KEP address is available.
Categories of personal data
- Identity and contact data: the name and e-mail address entered in the contact form.
- Request content: the message entered in the contact form.
- Transaction-security and technical data: IP address, request headers, technical logs and spam status.
- Preference and analytics data: cookie choice, policy version and measurement data only after analytics consent.
Purposes for processing personal data
- Receiving and answering contact requests and managing correspondence records.
- Delivering and securing the website and preventing spam and abuse.
- Applying the visitor's cookie choice and asking again when the policy changes.
- Measuring site usage only when analytics consent has been granted.
Transfers of personal data
Through the use of Amazon Web Services (AWS), AWS SES, Cloudflare and Google Analytics 4 (GA4), personal data is transferred abroad to the countries and for the purposes listed in this section.
- Amazon Web Services (AWS): Servers are in the AWS Istanbul Local Zone (Türkiye); part of the AWS infrastructure is in Frankfurt (Germany). Transfer purpose: Hosting and backups.
- AWS SES: Form notification e-mails pass through eu-central-1 (Frankfurt, Germany). A notification may contain the name, e-mail address and message submitted in the form. Transfer purpose: Delivery of contact-form notification e-mails.
- Cloudflare: The proxy is enabled; traffic, IP addresses and request headers pass through its global network. Transfer purpose: Traffic delivery and security/bot protection.
- Google Analytics 4 (GA4): Measures site usage only after analytics consent; measurement data is processed by Google on servers outside Türkiye, including in the United States. Transfer purpose: Usage measurement.
Collection method and legal basis
Personal data is collected electronically by automatic or partly automatic means through contact-form submissions, HTTP requests to the site, the browser preference record and measurement after analytics consent.
The contact-form checkbox confirms receipt of the notice; it is not explicit consent.
- Contact-form data: Article 5(2)(c) of Law No. 6698 (directly related to the formation of a contract) and Article 5(2)(f) (legitimate interest).
- Security and technical records and the cookie choice: Article 5(2)(f) (legitimate interest).
- Analytics measurement: explicit consent given through the analytics permission in the cookie notice.
Retention periods
- Contact-form submissions are kept for 12 months.
- Submissions marked as spam are kept for 30 days.
- User- and event-level data in GA4 is kept for 2 months.
Your rights under Article 11 of the KVKK
- Learn whether your personal data is processed.
- Request information if your personal data has been processed.
- Learn the purpose of processing and whether the data is used for that purpose.
- Know the third parties in Türkiye or abroad to whom your personal data is transferred.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction of personal data under the conditions in the Law.
- Request that correction, deletion or destruction be notified to third parties to whom the data was transferred.
- Object to an adverse result arising from analysis exclusively by automated systems.
- Claim compensation if you suffer damage because personal data was processed unlawfully.
Application channel
You may send requests concerning your rights by e-mail to [email protected] or in writing to the notification address Güllük Mah. Sağlık Sok. Faika Mithat Sözer İş Merkezi B Blok No:5/3 Daire:101, Adapazarı/Sakarya; requests are answered free of charge within 30 days at the latest.
Governing language
This English text is a translation. The Turkish version prevails in the event of any inconsistency.