KVKK Privacy Notice
UPDATED: Sep 20, 2026
DATA CONTROLLER
Berkay Aşkın · Mersin, Türkiye · berkay@berkayaskin.studio
This notice explains, as required by Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK), how the personal data you share through berkayaskin.studio is processed. The data controller is Berkay Aşkın, who runs the studio.
DATA PROCESSED
The site processes only the information you provide and the minimum technical information needed for the site to work.
- When you fill in the Let's talk form: your name, your email address or phone number, the topic and plan you selected, the message you wrote, the date and time you sent the form, and the language the site was open in.
- When you write by WhatsApp or email: the information you share yourself on that channel.
- While you browse the site: your IP address and browser information are recorded in the hosting service's server logs so that the site can reach you. When a form is sent, your IP address is used momentarily to limit repeated submissions and is not stored.
- If an error occurs on the site: the page where the error occurred, the browser and device type, and the technical detail of the error. Your IP address is not added to this record.
- If you consent to measurement cookies (Cookie Policy): a random identifier assigned to your browser, the pages you visit, your click and scroll movements, your device and browser type, and your approximate location (at country and city level).
Special categories of personal data such as health, religion or political opinion are not requested. Please do not include this kind of information in your message.
PURPOSE OF PROCESSING
- To evaluate your request and get back to you.
- To prepare a quote for the work you want and to carry out the agreement process.
- To let you know by email that your request has been received.
- To keep the site secure and prevent misuse of the form.
- To notice and fix errors that occur on the site.
- To measure how many times and from which pages the site is visited, without identifying individuals.
- If you give consent: to understand how visitors use the site and improve the pages accordingly.
Your information is not used for marketing, no newsletters or advertisements are sent, and it is not sold to anyone.
LEGAL BASIS AND METHOD OF COLLECTION
Your data is collected electronically when you fill in the Let's talk form on the site or write by email or WhatsApp. Server logs are created automatically when you open the site.
- Replying to your request and preparing a quote: processing directly related to the establishment of a contract (Law Art. 5/2-c).
- Site security, protection of the form, error monitoring and measuring visits without identifying individuals: the legitimate interest of the data controller, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f).
- Measurement and heatmap cookies: only your explicit consent (Art. 5/1). If you do not consent, these tools are never loaded; you can withdraw your consent at any time from the "Cookie preferences" link at the bottom of the page.
- If a business relationship is established, invoice and contract records: the legal obligation of the data controller (Art. 5/2-ç).
TRANSFERS
Your information is shared only with the companies whose services are used to run the site, and only to the extent that service requires.
- Vercel Inc. (USA): hosting the site and measuring visits without identifying individuals.
- Functional Software, Inc. (Sentry, USA): recording errors that occur on the site.
- Resend (Plus Five Five, Inc., USA; sending infrastructure in Ireland): delivering the form notification and the confirmation email sent to you.
- Google Ireland Ltd. / Google LLC: hosting the mailbox your request arrives in.
- If you give consent, Google Ireland Ltd. / Google LLC (Google Analytics and Google Tag Manager) and Microsoft Corporation (Microsoft Clarity): measuring how the site is used.
- If you choose to write via WhatsApp, Meta Platforms' own terms apply.
Because these companies' servers are located abroad, your data is transferred abroad. The transfer is carried out in accordance with the conditions in Article 9 of the Law. Unless there is a legal requirement, your information is not shared with any other person or institution.
RETENTION PERIOD
- If your request does not turn into a business relationship, it is deleted within 1 year at the latest after the last correspondence.
- If a business relationship is established, correspondence is kept for the duration of the contract, and invoice and contract records for the period required by the relevant legislation (10 years).
- Server logs are deleted at the end of the hosting service's own period, within 30 days at the latest.
- Error records are kept for a maximum of 90 days.
- Sending records of the form notification and of the confirmation email sent to you are kept in Resend for 30 days.
- Visit counts that do not identify individuals can be viewed in Vercel for a maximum of 24 months, depending on the plan in use.
- Measurement data collected with your consent is kept for a maximum of 14 months in Google Analytics and a maximum of 9 months in Microsoft Clarity; session recordings in Clarity are deleted after 30 days.
- The IP address used when a form is sent is not stored.
Data whose period has expired is deleted, destroyed or anonymized.
YOUR RIGHTS
Under Article 11 of the Law you have the following rights:
- To learn whether your personal data is processed and, if so, to request information.
- To learn the purpose of processing and whether the data is used in line with that purpose.
- To know the third parties to whom your data is transferred.
- To request correction of data that has been processed incompletely or incorrectly.
- To request deletion or destruction of your data when the conditions are met.
- To request that corrections and deletions be notified to those to whom your data was transferred.
- To object to a result against you arising from your data being analyzed solely by automated systems.
- To request compensation if you suffer damage because your data was processed unlawfully.
APPLICATION
To exercise your rights, you can write to berkay@berkayaskin.studio with enough information to verify your identity and with your request clearly stated. Your application is answered within 30 days at the latest and free of charge. If the reply involves an additional cost, the tariff set by the Personal Data Protection Board (KVKK Board) applies.
If your application is rejected, the reply is found insufficient, or no reply is given in time, you can file a complaint with the Personal Data Protection Board.
