Data Protection Notice
Effective date: 30 Temmuz 2026 | Last updated: 30 July 2026
This notice is issued in the capacity of data controller pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (the “Law” / “KVKK”) and the associated Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
1. Identity of the data controller
Data controller: Oğuz Han Erol (sole proprietorship registered in Türkiye)
Address: Göztepe Mah. Bağdat Cad. No: 201/8 İkar Plaza, 34730 Kadıköy / Istanbul, Türkiye
Tax office: Göztepe | Tax ID (VKN): 3670133479
Email: info@oguzerol.com | Phone: +90 549 654 64 89
Website: /
Under Article 3 of the Law, the data controller responsible for the processing of your personal data is the natural person identified above. No data controller representative has been appointed.
2. Categories of personal data processed
| Category | Data included |
|---|---|
| Identity | First name, surname; where an engagement begins, the trading name and tax details required for invoicing |
| Contact | Email address, phone number, website address, postal address |
| Customer transaction | Content of requests and complaints, proposal and contract records, correspondence history |
| Transaction security | IP address, date and time stamps, browser and device information, server access logs, cookie identifiers |
| Marketing | Browsing records obtained via cookies and pixels, traffic source, ad interaction and conversion data |
| Finance | Invoice and payment records — only for clients receiving services |
No special categories of personal data are processed. Data listed in Article 6 of the Law — such as health, religion, ethnic origin, political opinion, biometric and genetic data — is not requested. Please do not submit such data through the form or by message.
3. Purposes of processing and legal bases
| Processing activity and purpose | Legal basis (Law, Art. 5) |
|---|---|
| Responding to requests received via the contact form, phone, WhatsApp or email; analysing needs and preparing proposals | m. 5/2-(c): Sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması m. 5/2-(f): Meşru menfaat |
| Concluding and performing the service agreement, reporting, and managing client relationships | Art. 5/2-(c): Performance of a contract |
| Issuing invoices, keeping accounting and tax records, retaining statutory books and documents | m. 5/2-(a): Kanunlarda açıkça öngörülmesi m. 5/2-(ç): Hukuki yükümlülüğün yerine getirilmesi |
| Operating the website, keeping server and access logs, blocking spam and automated bot attempts, ensuring information security | m. 5/2-(ç): Hukuki yükümlülük m. 5/2-(f): Meşru menfaat |
| Statistical analysis of Site usage and improvement of content (analytics cookies) | Art. 5/1: Explicit consent |
| Measuring advertising performance, conversion tracking and remarketing (advertising cookies and pixels) | Art. 5/1: Explicit consent |
| Exercising the right of legal defence in the event of a dispute and securing evidence | Art. 5/2-(e): Establishment, exercise or protection of a right |
| Responding to requests from competent public authorities | Art. 5/2-(a) and (ç) |
You are under no obligation to give consent where processing is based on explicit consent, and you may withdraw consent at any time. Refusing or withdrawing consent does not prevent you from using the Site or receiving services.
4. Method of collection
Your personal data is obtained by wholly or partly automated means through the following channels:
- Completing the contact form on the Site,
- Contacting us via the phone, WhatsApp or email links on the Site,
- Records kept automatically by the server and content delivery network during your visit,
- Analytics and advertising measurement cookie/pixel technologies, to the extent you have consented,
- Documents and information you provide during the contract process, where an engagement begins.
5. Transfer of personal data
5.1. Domestic transfers (Law, Art. 8)
| Recipient group | Purpose of transfer |
|---|---|
| Accountant / bookkeeping service provider | Fulfilment of statutory bookkeeping, documentation and filing obligations |
| Legal counsel | Exercise of the right of defence in a legal dispute |
| Competent public authorities, courts and enforcement offices | Meeting requests and obligations arising from law |
5.2. International transfers (Law, Art. 9)
The Site’s hosting infrastructure, content delivery network, email infrastructure and its analytics, bot protection, map and advertising measurement services are provided by organisations established outside Türkiye. The following data is therefore transferred abroad:
| Recipient | Data transferred | Basis |
|---|---|---|
| Hosting and content delivery network providers (EU / USA) | Transaction security data; contact data when you submit a form | Appropriate safeguards under Art. 9 / technical necessity for delivery of the service |
| Email and communications infrastructure provider | Contact and correspondence data | Appropriate safeguards under Art. 9 |
| Google (analytics, ad measurement, bot protection, embedded map) | Transaction security and marketing data | Zorunlu/güvenlik amaçlı olanlarda uygun güvenceler; analitik ve reklam amaçlı olanlarda açık rızanız |
| Meta | Marketing data; contact data if you reach out via WhatsApp | Reklam ölçümlemesinde açık rızanız; WhatsApp’ta iletişimi sizin başlatmanız |
International transfers are carried out within the conditions set out in Article 9 of the Law — an adequacy decision, the provision of one of the appropriate safeguards, or your explicit consent. Where a transfer relies on explicit consent, you may withdraw that consent at any time from the cookie preferences panel.
6. Retention periods
| Data | Duration | Basis |
|---|---|---|
| Enquiries that do not lead to an engagement | 2 years from last correspondence | Legitimate interest |
| Client contract and contact records | 10 years from the end of the relationship | General limitation period (Turkish Code of Obligations) |
| Invoices and accounting documents | 10 years (at least 5 years for tax purposes) | Turkish Commercial Code Art. 82; Tax Procedure Law |
| Server and security logs | Maximum 12 months | Information security |
| Cookie data | Lifetime of the cookie | Cookie Policy |
| Explicit consent records | 12 months | Burden of proof |
At the end of the applicable period, data is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.
7. Your rights as a data subject (Law, Art. 11)
As a person whose personal data is processed, you have the right to apply to the data controller and:
- Learn whether your personal data is being processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether the data is used in accordance with that purpose,
- Know the third parties, in Türkiye or abroad, to whom the data has been transferred,
- Request correction where the data is incomplete or inaccurate,
- Request erasure or destruction within the conditions of Article 7 of the Law,
- Request that actions taken under (5) and (6) be notified to third parties to whom the data has been transferred,
- Object to an outcome adverse to you arising exclusively from automated analysis,
- Claim compensation where you suffer damage due to unlawful processing.
8. How to make an application
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request by one of the following means:
- In writing: Send a wet-signed letter in person, via notary or by registered post with return receipt to Göztepe Mah. Bağdat Cad. No: 201/8 İkar Plaza, 34730 Kadıköy / Istanbul, Türkiye . Marking the envelope “Information Request under the Personal Data Protection Law” speeds up handling.
- By secure electronic signature or mobile signature: Send your signed application to info@oguzerol.com .
- From your registered email address: Write to info@oguzerol.com from the email address you have previously notified to us and which is registered in our records.
Your application must include: your name and surname, and signature if made in writing; your Turkish ID number (for foreign nationals, nationality, passport number or ID number if any); your address for service; your email address, phone or fax number if any; and the subject of your request. Relevant information and documents should be attached.
Your application will be concluded free of charge as soon as possible and in any event within 30 days . If the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected, you find the response inadequate or no response is given within the period, you may lodge a complaint with the Turkish Personal Data Protection Boardwithin 30 days of learning of the outcome and in any event within 60 days of the date of application (Law, Art. 14).
9. Changes to this notice
This notice may be updated following changes in legislation or in the Site’s technical setup. The current version is always published on this page and the date at the top is updated.