Data Protection Notice
Information under Turkish data protection law (KVKK art. 10). It informs; it does not ask for consent.
This is an informational translation. In case of any discrepancy, the Turkish text prevails.
This is an information notice, not a consent form. You are not asked to consent anywhere for reading it, and there is no box to tick on this page. If a situation requiring consent arises, it will be asked separately and in a separate place.
1. Identity of the data controller
Under Turkish Law No. 6698 on the Protection of Personal Data, the data controller is:
- Name / title: Emirhan Sevim
- Nature: Natural person
- Address: not specified, not specified
- Email: emirhan@emirhansevim.com
- Registered electronic mail (KEP): none
2. Personal data processed
The set of personal data processed on this site is narrowand set out in full in the table below. Special categories of personal data (health, biometric, belief, union membership and the like) are not processed at all.
| Data category | Actual data | Source |
|---|---|---|
| Contact | Email address | You type it into the newsletter form yourself |
| Transaction security | IP address, request time, address opened, browser information | Automatic records of the hosting server |
| Other (technical) | Label of the page you filled the form on, sign-up time | Created automatically on form submission |
| Other (technical) | The name of the resource you downloaded and the day of download | Created when you click the download link in the email |
3. Method of collection
- Email address: by non-fully-automated means — you type it into the newsletter form while visiting the site. If you do not type it, this data never comes into existence.
- Server records: by fully automated means, during the request you make to the site.
4. Purposes of processing and their legal grounds
The specific processing condition relied on for each activity is written out one by one below.
4.1 Newsletter sign-up and delivery of the resource you asked for
- Purpose: delivering the free resource you requested and sending the newsletter content.
- Data: email address, form source label, sign-up time.
- Legal ground: KVKK art. 5/2-c — processing of personal data belonging to the parties to a contract being necessary, provided that it is directly related to the conclusion or performance of that contract. By filling in the form you request a resource; your address is necessary in order to deliver it.
- Is explicit consent required: no. Because the processing rests on the condition above, explicit consent is not sought and is not being sought.
To the extent that the messages sent are commercial in nature, a commercial electronic message consent under Law No. 6563is additionally required. That is a different consent from KVKK explicit consent, and neither replaces the other. Details: Email Preferences.
4.2 Server access records
- Purpose: serving the site, ensuring transaction security, fault diagnosis.
- Data: IP address, request time, address opened, browser information.
- Legal ground: KVKK art. 5/2-f — processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
- Is explicit consent required: no.
4.3 Remembering your cookie preference
- Purpose: not asking for your cookie preference again on your next visit.
- Data: your category choices, the time of choice, the text version. No identifying data is kept.
- Legal ground: this record does not require explicit consent because it is strictly necessary for performing a function you expressly requested.
4.4 Download record
- Purpose: measuring whether the requested resource was actually collected.
- Data: the name of the downloaded resource, the day of download and the id of the newsletter record.
- Legal ground: KVKK art. 5/2-f — processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. What is measured is whether the resource offered is any use.
- Is explicit consent required: no.
- The record keeps a DAY, not a time, and how many times you opened the same resource on that day is not recorded — a single row is written. The reason is a limit, not a measurement: what is needed is “was it collected”, not “when and how often”.
5. To whom and for what purpose data may be transferred
Your personal data is not sold and is not transferred to third parties for marketing purposes. Transfers are made only to the providers needed to operate the service, and only as far as that provider’s work requires:
- Supabase — storing the newsletter record and site content.
- Resend — emailing the resource you requested and newsletter issues.
- Vercel Inc. — publishing the site and server records.
- Authorised public institutions — only where legally required and limited to the basis of the request (within the scope of KVKK art. 5/2-a and art. 8/2-a).
Transfer abroad
Transfers abroad do take place. The providers above are connected and their servers are outside Türkiye; your newsletter record and the messages sent to you are processed there.
The basis for this transfer under KVKK art. 9 (an adequacy decision or an appropriate safeguard such as a standard contract): not specified. Nothing will be invented here until that basis is written: stating an unverified legal basis in this text would be a worse error than leaving the field empty.
6. Your rights as a data subject — KVKK art. 11
By applying to the data controller you may request the following:
- to learn whether your personal data is processed,
- to request information if it has been processed,
- to learn the purpose of processing and whether the data is used in accordance with that purpose,
- to know the third parties to whom the data is transferred, in Türkiye or abroad,
- to request correction if the data is incomplete or inaccurate,
- to request erasure or destruction within the conditions of the Law,
- to request that correction, erasure and destruction be notified to third parties to whom the data was transferred,
- to object to a result against you arising from analysis carried out solely by automated systems,
- to claim compensation if you suffer loss because of unlawful processing.
On this site no result about you is produced through analysis carried out solely by automated systems: there is no profiling, scoring or automated decision mechanism.
7. How to apply
You can submit your requests through these channels:
- Email: emirhan@emirhansevim.com
- Post: not specified, not specified
- Registered electronic mail (KEP): none
Your application must state your request clearly, together with information allowing your identity to be established. Applications are concluded in accordance with the procedure set out in the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller. If you are not satisfied with the outcome, your right to complain to the Personal Data Protection Board is reserved.
8. When this text is updated
When a new data processing activity begins on the site or a provider comes into use. Information must be given at the moment data is obtained and in any case before processing begins; that is why this text is updated before a change goes live.