Clarification Text on KVKK

This Clarification Text has been prepared in accordance with the Law on Protection of Personal Data (KVKK) No. 6698 to inform you about the processing, protection, and your rights regarding personal data collected through the 'sukruyusufkaya.com' website operated by Şükrü Yusuf KAYA. Protection of personal data is a constitutional right, and as data controller, all operations are conducted with full respect for this right.

1. Data Controller

Your personal data is processed by Şükrü Yusuf KAYA as the data controller, a natural person resident in Türkiye and registered with the Turkish Personal Data Protection Authority (KVKK). Contact: ee.sukruyusufkaya@gmail.com

2. Processed Personal Data

The following categories of personal data may be collected through the website: identification data (first name, surname), contact data (email, phone, message contents), transaction data (IP address, browser type, visit timestamp), marketing data (newsletter subscription, cookie IDs), and professional data (company name, position, industry submitted via forms).

3. Purposes of Processing

Your data is processed for: responding to your contact requests, planning and delivering training and consulting services, managing newsletter subscriptions, customer relationship management, improving service quality, fulfilling legal obligations, and providing information to authorized public bodies.

4. Legal Basis for Processing

Your personal data is processed under KVKK Article 5/2 for the following legal grounds: your explicit consent, performance of a contract, compliance with a legal obligation, and legitimate interests (within reasonable limits).

5. Data Transfer

Your personal data is shared in accordance with KVKK Articles 8 and 9, limited to: legal obligations (court, prosecution, audit authorities) and service providers (hosting: Vercel; email: Resend/SendGrid; analytics: Google Analytics). International data transfers are made only to safe countries listed in the relevant law or under contracts providing adequate protection.

6. Data Retention Period

Personal data is retained for the period required by the processing purpose, applicable legal retention periods (such as 10 years under the Turkish Code of Obligations), and legitimate interests. After this period, data is deleted, destroyed, or anonymized.

7. Your Rights (KVKK Article 11)

As a data subject you have the following rights: to learn whether your personal data is processed; to request information about the processing; to learn the purpose of processing and whether the data is used in accordance with that purpose; to know third parties to which data is transferred domestically or internationally; to request correction of incomplete or inaccurate data; to request deletion or destruction under KVKK Article 7; to request that these operations be communicated to third parties; to object to outcomes against you resulting from automated processing; to claim compensation for damages caused by unlawful processing.

8. How to Apply

To exercise your rights, submit an identifiable application to ee.sukruyusufkaya@gmail.com. The Data Controller will respond free of charge within a maximum of 30 days. If your application is rejected or deemed insufficient, you reserve the right to file a complaint with the Personal Data Protection Board (KVKK).