1. Data controller
The data controller under the KVKK is Bilal Çayır, freelance software developer.
• Email: biilalcayir@gmail.com • Telegram: @Elyziumm
2. Personal data processed
This site has no contact forms and no visitor accounts. The data processed is limited to the following:
• Contact data: the name/username, contact details and message content you share when you choose to write to me via Telegram or email. • Security data: the IP address, browser information, time of access and requested page recorded in server logs. • Preference data: the NEXT_LOCALE cookie that remembers your chosen language (see the Cookie Policy for details).
If enabled, the Umami analytics tool does not use cookies, does not store IP addresses and does not create personal profiles; it only produces aggregated page view statistics.
3. Purposes of processing
Your personal data is processed only for the following purposes:
• to answer your messages and requests, • to prepare a quote for and deliver the work you request, • to keep the site secure and to detect misuse and technical errors, • to present the site properly by remembering your language preference, • (if enabled) to understand overall use of the site through anonymous, aggregated statistics.
4. Legal grounds
Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:
• (c) processing is directly related to the conclusion or performance of a contract: preparing quotes and delivering the requested work. • (ç) processing is necessary to comply with a legal obligation of the data controller: for example, tax and accounting records. • (e) processing is necessary to establish, exercise or protect a right: possible disputes. • (f) processing is necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms: answering messages, server security and remembering your language preference.
5. Transfers of personal data
Your personal data is not sold and is not shared for advertising. It may be shared with, or processed on the infrastructure of, third parties only in the following cases:
• Hosting: the site runs on a server operated by me; the server infrastructure is provided by a data centre based in Istanbul, Türkiye. • Communication platforms: when you write via Telegram or email (Gmail), your messages are processed on those platforms' infrastructure under their own privacy policies. Telegram's and Gmail's servers may be located outside Türkiye. • Authorities: competent public authorities where required by law.
Where personal data is transferred abroad, this is done in line with the conditions set out in Article 9 of the KVKK. Exchange rates are fetched server-side from the European Central Bank; no visitor data is sent in the process. Fonts are served from the site's own server.
6. How personal data is collected
Your personal data is collected in the following ways:
• through the messages you choose to send me via Telegram or email (electronically, partly by non-automated means), • through logs recorded automatically by the server when you visit the site, • through the NEXT_LOCALE cookie stored in your browser when you choose a language.
7. Retention period
Personal data is kept for as long as the purpose of processing requires:
• Server logs are kept for 30 days for security purposes and then deleted. • Correspondence is kept until your request has been answered and the work is completed; afterwards only for as long as required by statutory retention obligations (e.g. tax law) or possible disputes. • The NEXT_LOCALE cookie is removed automatically from your browser after 1 year.
Data whose retention period has expired is deleted, destroyed or anonymised.
8. Your rights under Article 11 of the KVKK
Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:
• to learn whether your personal data is processed, • to request information if your personal data has been processed, • to learn the purpose of the processing and whether the data is used in line with that purpose, • to know the third parties in Türkiye or abroad to whom your personal data is transferred, • to request correction if your personal data is incomplete or inaccurate, • to request deletion or destruction of your personal data under the conditions of Article 7 of the KVKK, • to request that correction, deletion or destruction be notified to the third parties to whom your data was transferred, • to object to a result against you arising from analysis of your data exclusively by automated systems, • to claim compensation if you suffer damage due to unlawful processing of your personal data.