Privacy Policy
Effective date: 30 Temmuz 2026 | Last updated: 30 July 2026
Bu politika, oguzerol.comor get in touch, why it is collected, who it is shared with and how long it is kept.
For the formal notice setting out the legal framework and your rights under Turkish Personal Data Protection Law No. 6698 (“KVKK”), see the KVKK Aydınlatma Metni. For cookie detail, see the Cookie Policy.
1. Data controller
Trading name: Oğuz Han Erol (sole proprietorship registered in Türkiye)
Address: Göztepe Mah. Bağdat Cad. No: 201/8 İkar Plaza, 34730 Kadıköy / Istanbul, Türkiye
Tax office: Göztepe | Tax ID (VKN): 3670133479
Email: info@oguzerol.com | Phone: +90 549 654 64 89
2. Short version
- There is no membership, user account or comment system on the Site. You are never asked to register.
- No payment is taken through the Site; card or bank details are never collected here at any stage.
- I receive data that directly identifies you only when you fill in the contact form, call me, or write via WhatsApp or email.
- Statistical and advertising measurement data about your visit is collected only if you have given cookie consent.
- Your data is never sold, rented or transferred to third parties for their own marketing.
3. What is collected, and when
3.1. When you contact us directly
| Channel | Data collected | Why |
|---|---|---|
| İletişim formu | Name, email, phone, website address, message text; plus IP address and timestamp at submission | To answer your request, prepare a proposal and prevent form abuse |
| Phone / WhatsApp | Phone number, conversation content, WhatsApp profile name | To conduct the conversation and record the request |
| E-posta | Email address, correspondence content and any attachments | To continue the correspondence and manage proposal and contract processes |
| If an engagement begins | Invoicing details (company name, tax office and number, address), contact person details, advertising account access credentials | Performance of the agreement and statutory bookkeeping obligations |
Data deliberately not collected: Special categories of personal data such as health, religion, ethnic origin, political opinion or biometric data are never requested. Please do not send such data through the form or by message.
3.2. Data generated automatically while you browse
| Source | Data collected | Consent needed? |
|---|---|---|
| Server and content delivery network logs | IP address, date and time, requested URL, browser and operating system (user agent), response code | No — necessary for operation and security |
| Strictly necessary cookies | Session, security, language preference, record of your cookie choice | No — required for the Site to work |
| Bot protection (Google reCAPTCHA) | IP address, device and browser information, on-page interaction signals | No — required for form security |
| Web analytics (Google Analytics 4) | Cookie identifier, pages viewed, time on site, approximate location (city level), device and traffic source | Evet — analytics cookie consent |
| Advertising measurement and remarketing (Google Ads, Meta) | Cookie/pixel identifier, which ad brought you here, conversion events such as form submission | Evet — advertising cookie consent |
| Embedded map and external links | The relevant provider may set its own cookies | Evet — consent for the relevant cookie group |
Site’de Google Consent Mode : until you give cookie consent, analytics and advertising tags neither read nor write personal data. You can change your choice at any time from the cookie preferences link at the bottom of the page.
4. Why the data is processed
- To respond to you and prepare a proposal — form, phone and email data.
- To conclude and perform an agreement — contact and invoicing details of clients.
- To meet legal obligations — invoicing, bookkeeping and document retention; responding to requests from competent authorities.
- To keep the Site secure — blocking spam, automated bots and attack attempts.
- To improve the Site — understanding which pages are useful (only with analytics consent).
- To measure advertising performance and run remarketing — seeing which ad works and being able to show ads to Site visitors across the Google and Meta networks (only with advertising cookie consent).
No automated decision-making: No decision producing legal effects or similarly significantly affecting you is taken solely on the basis of automated analysis.
5. About the use of AI tools
AI-assisted tools are used in service delivery and content production. The commitments here are:
- Contact form data from Site visitors is not used to train AI models and is not transferred to third parties for that purpose.
- Client data is processed only within the scope of that client’s work and under a duty of confidentiality.
- Output produced by AI tools is reviewed by a human before it is published or implemented.
6. Who the data is shared with
Your data is not sold. It is shared only in the following cases and only as far as necessary:
| Recipient group | Purpose |
|---|---|
| Hosting and content delivery network providers | Keeping the Site online and secure |
| Email and communications infrastructure providers | Delivering form notifications and correspondence |
| Google (analytics, ad measurement, bot protection, embedded map) | Measurement, advertising performance and security — within the scope of your consent |
| Meta | Ad measurement and remarketing — within the scope of your consent; also, if you write via WhatsApp, that conversation takes place on Meta’s infrastructure |
| Accountant / bookkeeping service provider | Statutory bookkeeping and filing obligations (only for clients who are invoiced) |
| Legal counsel, competent public authorities and courts | Where required by law or to establish and protect legal claims |
International transfers
The Site’s hosting and content delivery infrastructure, together with the analytics, advertising and communications services listed above, are operated on servers located outside Türkiye (principally in the European Union and the United States). Your data is therefore transferred abroad in technical terms. Such transfers are made on the basis of the conditions set out in Article 9 of Law No. 6698 — your explicit consent or one of the appropriate safeguards provided for in the Law. See the KVKK Aydınlatma Metni.
7. How long data is kept
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | 2 years from the last correspondence |
| Client contact and contract records | Hizmet ilişkisinin bitiminden itibaren 10 years (genel zamanaşımı) |
| Invoices and accounting documents | 10 years (Turkish Commercial Code Art. 82) / at least 5 years under tax legislation |
| Server and security logs | Maximum 12 months |
| Analytics and advertising cookie data | Çerezin kendi ömrü kadar — ayrıntısı Cookie Policy‘nda |
| Record of your cookie consent | 12 months (for evidentiary purposes) |
Once the period expires, data is deleted, destroyed or irreversibly anonymised.
8. Security
- The entire Site is served over encrypted HTTPS/TLS.
- Administrative access is protected by strong passwords and access restrictions; sessions and login attempts are logged.
- Software and infrastructure components are updated regularly; attack protection is applied at the content delivery network level.
- Data is accessed only as far as the work requires; as a one-person business, the circle of access is inherently narrow.
- Backups are taken regularly.
No system can offer absolute security. If a breach affecting your personal data is identified, the notifications required by Law No. 6698 and the decisions of the Turkish Personal Data Protection Board will be made.
9. Your rights
Under Article 11 of Law No. 6698 you have the right to: learn whether your data is processed; request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred at home or abroad; request correction of incomplete or inaccurate data; request erasure or destruction where the conditions are met; request that these actions be notified to third parties to whom the data was transferred; object to an adverse outcome arising from automated analysis; and claim compensation for damage caused by unlawful processing.
The application procedure and time limits are set out in full at the end of the KVKK Aydınlatma Metni. In short: send your request in writing to info@oguzerol.com or to the postal address above; it will be answered within 30 days at the latest.
10. Children’s data
The Site is not directed at children and personal data is not knowingly collected from anyone under 18. If such data is found to have been submitted, it is deleted without delay.
11. Changes
This policy is updated when legislation or the Site’s technical setup changes. The current version is always published on this page and the date at the top is updated. Material changes are additionally announced on the Site.
12. Contact
For any privacy question or request:
Oğuz Han Erol
Göztepe Mah. Bağdat Cad. No: 201/8 İkar Plaza, 34730 Kadıköy / Istanbul, Türkiye
info@oguzerol.com | +90 549 654 64 89