KVKK Disclosure

Data Controller

Pursuant to the Personal Data Protection Law No. 6698 (“KVKK”), the data controller is Serhat Sosyal.

• Data Controller: Serhat Sosyal
• Contact Email: privacy@serhatsosyal.com
• Channel: Contact form available on this website

This disclosure is provided to inform data subjects about the processing of personal data in a clear, lawful, and transparent manner.

Purpose of Processing

Personal data may be processed by Serhat Sosyal for the following purposes:

• Managing communications and responding to inquiries submitted through the website
• Operating, securing, and improving website functionality and digital services
• Conducting analytics necessary to understand usage patterns and improve content
• Fulfilling legal and regulatory obligations
• Establishing, exercising, or defending legal claims where necessary
• Maintaining professional relationships and supporting legitimate business activities

Categories of Personal Data

Depending on your interaction with the website, the following categories of personal data may be processed:

• Identity information (for example, name and surname, if provided)
• Contact information (for example, email address and message content)
• Transaction security data (for example, IP address, access logs, and technical identifiers)
• Marketing and analytics data derived from cookies or similar technologies, where applicable
• Professional information voluntarily shared in correspondence

Collection Methods

Personal data may be collected through the following methods:

• Information submitted directly via contact forms or email correspondence
• Automatic collection through website logs, cookies, and similar technologies
• Information obtained during the ordinary course of digital communications and service use

Data is collected electronically and processed in accordance with the principles set out under KVKK.

Legal Grounds

Personal data is processed based on one or more of the legal grounds under Articles 5 and 6 of KVKK, including where:

• It is necessary for the establishment or performance of a contract or pre-contractual request
• Processing is mandatory for the data controller to fulfill a legal obligation
• Processing is necessary for the establishment, exercise, or protection of a right
• Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
• Explicit consent has been obtained for processing activities that require consent

Third-Party Transfers

Personal data may be transferred domestically or abroad in accordance with Articles 8 and 9 of KVKK, only when necessary and with appropriate safeguards, including to:

• Infrastructure, hosting, analytics, and communication service providers
• Professional advisors and authorized persons acting under confidentiality obligations
• Competent public authorities and judicial bodies when legally required

Transfers are limited to the purpose of processing and are carried out in a manner consistent with applicable data protection requirements.

Data Retention

Personal data is retained for the period required by the purpose of processing and relevant legislation. When the retention period expires or the processing purpose no longer exists, personal data is deleted, destroyed, or anonymized in accordance with KVKK and related secondary regulations.

Rights Under Law No. 6698

Pursuant to Article 11 of KVKK, data subjects have the right to:

• Learn whether personal data is processed
• Request information if personal data has been processed
• Learn the purpose of processing and whether it is used in accordance with its purpose
• Know the third parties to whom personal data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of personal data under the conditions set forth in KVKK
• Request notification of correction, deletion, or destruction to third parties to whom data has been transferred
• Object to results arising against the data subject through analysis of processed data exclusively by automated systems
• Request compensation for damages arising from unlawful processing of personal data

Contact & Application Procedures

Data subjects may submit requests regarding their rights under KVKK to Serhat Sosyal by contacting:

• Email: privacy@serhatsosyal.com
• Website contact form: Contact page

Applications should include sufficient information to verify identity and clearly describe the request. We will evaluate and respond to applications within the periods prescribed by KVKK and applicable regulations. Where the request is rejected, the reason will be explained in writing or electronically.