GDPR DATA PROTECTION NOTICE

This notice complements the Privacy Policy for aliosman.com.tr. KVKK applies to the website's processing in Türkiye; GDPR rights apply to a processing activity where it falls within that regulation's scope.

1. Data Controller

The data controller for this personal website is Ali Osman KAHRAMAN. Data protection requests may be submitted through the contact page.

2. Categories of Personal Data

The form collects your full name, email, subject and message; phone is optional. Server requests provide IP addresses, request times and technical request data used for security and operation. A session identifier supports form security.

3. Purposes of Processing

• To respond to contact form submissions and communication requests.
• To operate, maintain and secure the website.
• To detect and prevent abuse, spam, unauthorized access or security incidents.
• To comply with legal obligations and lawful requests.

4. Legal Bases

Under KVKK, general correspondence and necessary security processing rely on Article 5(2)(f), subject to respecting fundamental rights. Contract-related processing, legal obligations and legal claims rely on Articles 5(2)(c), 5(2)(ç) and 5(2)(e) where relevant. Where the GDPR applies, Article 6(1)(f) covers necessary legitimate interests, Article 6(1)(b) relevant contractual steps and Article 6(1)(c) applicable legal obligations. Merely visiting the website is not consent.

5. Recipients and Service Providers

The site owner uses submitted data to assess and answer requests. The website and email servers are owned by the site owner and located in Türkiye. Relevant data may be disclosed to competent authorities where legally required.

6. International Transfers

Fonts are loaded from Google Fonts. Your browser connects to Google servers, which may receive your IP address and technical request information. See Google Fonts privacy information.

7. Retention Period

Contact messages are kept until the related matter is completed and are then deleted. Server access and security logs are kept for six months and automatically deleted afterwards. If a legal obligation or protection of a legal claim requires retention, only relevant records are retained for the necessary period.

8. Your GDPR Rights

Subject to applicable conditions and limitations, you may have the following rights:

• Right to access your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure, also known as the right to be forgotten.
• Right to restriction of processing.
• Right to object to processing based on legitimate interests.
• Right to data portability where applicable.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a competent supervisory authority.

9. Automated Decision-Making

This website does not use personal data submitted through the contact form for automated decision-making that produces legal or similarly significant effects.

10. How to Exercise Your Rights

You may submit a data protection request through the contact page. To protect privacy and security, identity verification or additional information may be requested before fulfilling certain requests.