Privacy Policy

This notice is provided under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) to inform visitors of the personal website at yunusemresak.com.

The data controller is Yunus Emre SAK (Istanbul, Türkiye). For questions and requests about this notice: [email protected].

• Contact data: the contact form on this site does not store your message; it only opens your email app with a ready draft. When you send it, or write directly by email or LinkedIn, your name, email address, company name (if given) and the content of your message are processed.
• Security data: for every request, your IP address, browser and device information, the requested address and the time are technically processed by the site's hosting and content delivery infrastructure.
• Cookieless visit statistics (every visitor): your browser reports the address and title of the page you open, the address that referred you, your screen resolution, language setting and time on the page to this site's server. The server forwards them to Google Analytics together with the device, operating system and browser type it derives from your browser information and the country and city Cloudflare determines from your IP address. Your IP address is not sent to Google, nothing is stored in your browser and the ID only lives while that tab is open; you are not recognised on your next visit.
• Cookie-based usage data (only with your consent): Google Analytics cookies measure the same data with a random ID stored in your browser, so returning visitors and continuity between visits can be seen. In this case your browser connects to Google directly. Google Analytics 4 does not log IP addresses.

The site has no accounts, payments or comments, and no special categories of personal data are requested.

• Replying to your enquiry and running meetings, proposals and partnerships: necessity for entering into or performing a contract (KVKK Art. 5/2-c) and legitimate interest (Art. 5/2-f).
• Keeping the site secure and available, preventing attacks and fixing errors: legitimate interest (Art. 5/2-f).
• Seeing which pages are read and where visitors come from with cookieless statistics: legitimate interest (Art. 5/2-f). No identifier is stored and your IP address is not passed to Google.
• Seeing returning visitors and continuity between visits with cookie-based measurement: your explicit consent (Art. 5/1), given in the cookie banner and withdrawable at any time.
• Protecting rights in a legal dispute and responding to competent authorities: legal obligation and the establishment, exercise or defence of a right (Art. 5/2-a, ç, e).

Personal data is collected electronically: directly from you when you send an email or message, automatically through the information your browser reports to the server and through the server and content delivery infrastructure when you visit the site, and through cookies only if you consent. Cookie details are in the Cookie Policy.

Personal data is never sold or shared for advertising. It may be transferred only for the purposes above to:

• Hetzner Online GmbH (Germany): the server hosting the site.
• Cloudflare, Inc. (USA): content delivery, DNS and attack protection.
• Google LLC and Google Ireland Limited: Google Analytics (cookieless statistics via the server without your IP address; cookie-based measurement only if you consent); YouTube, when you play a video in a blog post.
• Email service provider: receiving and storing the emails you send.
• Competent public authorities and courts: only where required by law.

Some of these providers operate servers outside Türkiye. Such transfers are made in line with the conditions and safeguards of Article 9 of the KVKK.

• Correspondence: up to 2 years after your request is closed. If it turns into a business relationship, the periods required by the relevant legislation apply.
• Technical logs: short-lived security logs kept by the hosting and content delivery providers, for their own retention periods.
• Usage data: for the data retention period set in Google Analytics, at most 14 months. How long cookies stay in your browser is listed in the Cookie Policy.

When the period ends, data is deleted, destroyed or anonymised.

Under Article 11 of the KVKK you may ask the data controller to:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties in Türkiye or abroad to whom it is transferred,
• have incomplete or inaccurate data corrected,
• have it erased or destroyed under the conditions of Article 7,
• have corrections and erasures notified to the third parties it was transferred to,
• object to a decision against you that results solely from automated analysis,
• claim compensation for damage caused by unlawful processing.

Visitors in the EU/EEA may exercise the equivalent rights under the GDPR through the same address and may also lodge a complaint with their local supervisory authority.

Send your request to [email protected] with enough information to verify your identity. Requests are answered free of charge within 30 days at the latest; if the action involves an additional cost, the tariff set by the Turkish Personal Data Protection Board may apply.

If your request is rejected, you find the answer insufficient or no answer is given in time, you may complain to the Personal Data Protection Board (KVKK).

When this notice is updated, the last updated date at the top of the page changes.