home / legal
legal

Personal Data Protection Notice

This notice explains how personal data collected through this website is processed, under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the GDPR where applicable.

Last updated: 1 September 2026

Data controller

The data controller is Ömer Faruk Kara (Bursa, Türkiye). “We” in this notice refers to the controller. Contact: o.f.karaa@gmail.com

Personal data processed

When you submit the contact form we process your name, email address, optional subject line and the content of your message.

When you use the AI chat assistant we store the messages you write, the answers given, browser information and a country code. Please do not enter identity documents or sensitive data into the chat.

Your language and theme preferences are stored in cookies. Your IP address may be held briefly in server logs.

Purpose and legal basis

Your data is processed only to reply to your enquiry, to prepare a service proposal and to keep the site secure.

The legal basis is performance of a contract (KVKK art. 5/2-c, GDPR art. 6(1)(b)) and legitimate interest (art. 5/2-f, art. 6(1)(f)). For the chat assistant and preference cookies we rely on your explicit consent.

Transfers abroad

The AI chat assistant runs on Anthropic (Claude API); the messages you write are sent to that service to generate a reply and are processed outside Türkiye. This transfer happens only with your explicit consent.

Beyond that, your data is not shared with third parties, sold, or used for advertising.

Retention

Contact messages are kept for at most 24 months after correspondence ends. Chat transcripts are kept for at most 12 months. Cookies expire at the end of the session or after at most 12 months, depending on type.

Your rights

You have the right to access your data, to have it corrected or erased, to object to processing, and to seek compensation for damages (KVKK art. 11; GDPR arts. 15–22).

Send requests to o.f.karaa@gmail.com. We respond within 30 days at the latest.

Security

Data is held in access-restricted files on the server, transferred over HTTPS, and the administration panel is password protected.