KVKK Privacy Notice
Türkçe oku →Last updated: 5 October 2026
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It is a translation for convenience; if the two differ, the Turkish version prevails. A plain-language summary is in the Privacy Policy.
1. Data controller#
Halit Yeşil (natural person)
Correspondence address: c/o Globya Bilgi Teknolojileri, Mustafa Kemal Mh. Dumlupınar Bulvarı, Tepe Prime Plaza A Blok No:266 D:18, Çankaya/Ankara, Türkiye
Email: kvkk@halityesil.com
2. Data processed, purposes and legal grounds#
| Category | Data | Purpose | Legal ground |
|---|---|---|---|
| Transaction security | IP address, date and time of access, requested URL, browser details, referring page (web server access logs) | Running the site, information security, detecting errors and attacks | KVKK Art. 5(2)(f), legitimate interest |
| Identity and contact | Name, email address and optional website you enter when commenting | Publishing the comment, moderation, contacting you if needed | Art. 5(2)(f), legitimate interest; for the published name and comment, Art. 5(2)(d), data made public by the data subject |
| Content | Comment text | Publishing the comment | Art. 5(2)(d) |
| Transaction security | Keyed hash of the IP address (HMAC-SHA256), browser details | Preventing spam and abuse | Art. 5(2)(f), legitimate interest |
| Usage data (analytics) | Usage data collected through Google Analytics cookies (pages visited, approximate location, device and browser details, online identifiers) | Visit statistics, improving the content | Art. 5(1), explicit consent; only if you accept in the cookie banner |
| Communication | Your email address and the content of your message when you email us | Replying to your request | Art. 5(2)(f), legitimate interest |
No special categories of personal data (health, religion, ethnic origin, etc.) are processed. Please don't share such information in comments.
3. How data is collected#
Personal data is collected electronically:
- automatically by the web server (access logs),
- through the comment form, from the fields you fill in,
- automatically through Google Analytics cookies, only if you consent,
- by email, if you write to us.
4. Recipients#
Personal data may be shared, only for the purposes above, with:
- the hosting provider (data processor): Globya Bilgi Teknolojileri; the server is located in Hetzner Online GmbH's data centre in Falkenstein, Germany;
- Google (Google Analytics): only with your explicit consent;
- competent public authorities: where explicitly required by law and only to the extent requested.
Because the server is in Germany and Google Analytics data is processed on Google's servers abroad (including the United States), your personal data is transferred outside Türkiye. Data is sent to Google Analytics only if you accept analytics in the cookie banner; otherwise nothing is transferred to Google. The legal basis for these transfers under Article 9 of the KVKK will be set out in this section after legal review.
5. Retention#
| Data | Period |
|---|---|
| Web server access logs | 7 days (rotated daily) |
| Application error logs (no IP) | 30 days |
| Published comments | As long as the comment is published; deleted on request |
| Comments marked as spam or moved to trash | 30 days |
| IP hash in the rate-limit counter | At most 1 hour, then removed by the daily maintenance task |
| Google Analytics data | 14 months |
| Email correspondence | 2 years after the correspondence ends |
Data is deleted or anonymised when its retention period ends.
6. Your rights (KVKK Art. 11)#
By applying to the data controller, you have the right to:
- (a) learn whether your personal data is processed;
- (b) request information about the processing if it is;
- (c) learn the purpose of the processing and whether the data is used for that purpose;
- (ç) know the third parties in Türkiye or abroad to whom the data is transferred;
- (d) request rectification of incomplete or inaccurate data;
- (e) request erasure or destruction of the data under the conditions in Article 7 of the KVKK;
- (f) request that third parties to whom the data was transferred be notified of actions taken under (d) and (e);
- (g) object to a result against you arising from analysis of the data exclusively by automated systems;
- (ğ) claim compensation for damage arising from unlawful processing.
For processing based on your explicit consent (Google Analytics), you can withdraw consent at any time with the "Cookie preferences" link at the bottom of every page.
7. How to apply#
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can apply:
- in writing, with a signed letter to the address above;
- by an email signed with a secure electronic signature or mobile signature, sent to kvkk@halityesil.com;
- or from an email address you previously gave us and that is recorded in our system (for example, the one you used to comment), sent to kvkk@halityesil.com.
Your application should include your name and surname (and signature if in writing), your Turkish ID number if you are a Turkish citizen (or your nationality and passport number, or ID number if any, if you are not), your address for notifications, your email address and phone number if available, and what you are requesting.
We will respond free of charge as soon as possible and within 30 days at the latest. If the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, you find the answer insufficient or we don't respond in time, you can file a complaint with the Personal Data Protection Board under Article 14 of the KVKK.