Privacy Notice

Ataberk Soylu (a private individual), Istanbul, Türkiye. Contact: ataberk@ataberksoylu.com

When you send the form, your name, email address, message, the topic you picked and the page language are stored; your company/site and phone too, if you fill them in. To protect the form from abuse (spam, flooding), a salted, irreversible hash of your IP address is kept; your raw IP address is not stored.

Purpose: to reply to you and run the project and quote conversation. Legal basis: steps prior to entering a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) and my legitimate interest in keeping the form safe (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

Your message is linked to this browser's visit record, and the approximate city/country derived from your IP and your device type (e.g. “Mobile · iOS · Safari”) are added to it. If you turned statistics off, no such link is made.

The site has no Google Analytics, ad pixels or other third-party trackers. It has a statistics system I wrote myself, which records the following to understand how the site is used and whether what I send is of interest. Legal basis: my legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)). You can turn it off at any time with “Cookie settings” in the footer.

• A random visitor ID stored in your browser, and a session count
• The pages you view, time on page, how far you scroll, the sections you see
• The links and buttons you click; that you focused a form field (not what you typed); that you copied something (only its length, never the text); page errors
• Where you came from: the previous page address, campaign tags (UTM), the type of ad click (e.g. “Google Ads”)
• Language, time zone, screen and window size, device/browser/OS type, light/dark theme, connection speed type, page load time
• The approximate country, region, city, postal code and city-level coordinates derived from your IP address; a salted hash of your IP address (to group visits from the same network)

I send my portfolio to some people with a link made for them, like ataberksoylu.com/name. If you came through such a link, your visit is matched to it: I can see whether the person I sent it to opened the site, which pages they viewed, and whether the link was opened from another network or city. Turning statistics off deletes this match and stops recording.

Purpose: to learn whether what I sent was of interest. Legal basis: my legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

• No fingerprinting (canvas, audio, font probing); no hidden ID is built from your browser
• Nothing you type in the form goes anywhere until you press send
• No raw IP address or device (GPS) location is stored
• Your data is not sold, used for advertising or shared (except with the providers below)

The site and its data run on these providers: Vercel Inc. (hosting and servers, USA), Neon (database, servers in Frankfurt, Germany), Google LLC (Google Workspace email; form messages are forwarded to me by email). As the servers are outside Türkiye, your data is transferred abroad (KVKK Art. 9).

Transferring form messages is necessary to answer your request.

Data is disclosed to a public authority only when the law requires it, and only within that request.

• Form messages: 2 years, then deleted automatically
• Visit and interaction records: 12 months, then deleted automatically
• Statistics data in your browser: deleted as soon as you turn statistics off
• Write to me if you want anything deleted sooner

Under KVKK Art. 11 and the GDPR you can ask to know whether and how your data is processed, its purpose and who receives it; to have it corrected, deleted or restricted; to object to processing; to receive it in a portable form (GDPR); to turn statistics off at any time; and to be compensated for damage from unlawful processing.

Email ataberk@ataberksoylu.com with your name and request. I answer within 30 days, free of charge. If you're not satisfied, you can complain to Türkiye's Personal Data Protection Authority (kvkk.gov.tr) or, in the EU, to your local data protection authority.