Controller and purpose of this notice
This is a personal profile, technical journal and contact website operated individually by İsa Öztürk. Its configured website address is https://isaozturk.com. It is not presented as an official communication channel of an employer, client or other organisation.
For the personal website activities described here, İsa Öztürk is the data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK). This notice explains processing when personal data is collected. Providing notice and asking for consent are different matters: reading it does not amount to consent for every activity.
Privacy and personal data request contact: bilgi@isaozturk.com. This channel is used to assess and respond to requests.
What information may be involved?
- When contact is enabled: name, email, subject, message and receipt or response status.
- For authorised panel accounts: email, display name, role, active status, secure password-verification information and limited invitation or recovery records.
- Session, request, timing, error, access and misuse indicators necessary for website and account security.
- Limited preference information, such as selected categories, choice time and policy version.
Visitors do not need a general membership. A telephone number is not a required contact form field. The form does not request special-category data, identity documents or passwords. Please do not include them in a message. If unnecessary or excessive information is received, the need to process it is assessed and unnecessary retention should be avoided.
Collection methods
Information is obtained electronically through fields you complete in the website or authorised management interface, account operations and technical browser-to-server requests. If email is enabled, the relevant notification may pass through the email provider's infrastructure. An ordinary social link does not mean the website automatically reads private information from that profile.
Purposes and legal grounds
Contact information is used to assess enquiries, discuss opportunities or collaboration and provide a response. Where a conversation is directly related to establishing or performing a contract and processing is necessary, Article 5(2)(c) may apply. For purposes such as ordinary correspondence and prevention of misuse, necessity under Article 5(2)(f) is assessed with regard to individual rights and freedoms. The same legal ground is not automatically assigned to every situation.
Authorised account information supports panel access, defined responsibilities and revocation of permissions. Technical security records protect the service, help investigate errors and limit unauthorised actions. Processing necessary to meet a concrete legal obligation may rely on Article 5(2)(ç), and limited retention necessary to establish, exercise or protect a right may rely on Article 5(2)(e). A feature requiring consent needs a separate, specific and freely made choice. A purpose not requiring consent should not be made conditional on a compulsory consent box in every case.
This notice does not describe selling personal data, advertising profiles, general-purpose visitor tracking or automated eligibility decisions about employment or services. Adding such an activity would require a separate assessment of its purpose, legal ground and notice.
Recipients and reasons for disclosure
Hosting, storage and necessary email providers may process data to the extent required to deliver their services. Authorised panel users should access only the records their role requires. Relevant information may be disclosed to competent public authorities when a valid legal request or duty applies. Limited professional or legal advice may also be considered where necessary to protect rights in a specific matter.
Following a social or news link may create a separate interaction with the destination service. Listing a source does not make it a recipient of contact messages. Building advertising recipient lists is not a default processing purpose of this website.
Services outside Türkiye
The selected Cloudflare, Resend or other provider service may result in information being stored, processed or accessed outside Türkiye. A transfer then requires assessment under the current Article 9 framework and related regulation. Depending on the circumstances, an adequacy decision, an appropriate safeguard or another narrowly defined statutory condition may be relevant. Accepting this notice or visiting the site is not assumed to legitimise an ongoing international transfer. No definitive claim about compliance is made before the provider and required contractual or procedural conditions are established.
Retention and data lifecycle
The configured ordinary target is 180 days for general contact records and 30 days for technical security or error records. Account information is considered in relation to the period of authorised account use and necessary access records. When a period expires or the purpose ends, deletion, destruction or anonymisation should follow unless another valid ground remains. An ongoing conversation, dispute or specific obligation may justify keeping a limited relevant record for a separate documented reason.
Access and retention cycles for backups must also be considered. Restoring an older copy does not justify returning previously removable records to ordinary use. The consequences of a request should also be assessed in relation to relevant processors and backup procedures.
Your rights and requests
Under Article 11, you may ask whether data about you is processed, obtain information if it is, and ask about purposes, use and recipients. You may request correction of incomplete or inaccurate data and, where the conditions apply, deletion or destruction and notification of relevant recipients. Statutory rights also cover objections to an adverse result arising solely from automated analysis and compensation for harm caused by unlawful processing.
The Personal Data Requests page explains scope, verification and response methods. Properly submitted requests are assessed as soon as appropriate to their nature and within thirty days. The Board's tariff rules remain applicable where an operation involves an additional cost.
References: KVKK duty to inform, individual rights, international transfers.
Last updated: 4 November 2026.