Privacy notice (KVKK)
This privacy notice under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) is a DRAFT; it requires legal review.
Data controller
Data controller and publisher: Burak Emen (an individual, not tied to any company), Istanbul, Turkey. Contact: burak.emen@proclust.com
Data processed and purposes of processing
Readers have no account, membership or newsletter sign-up; we do not collect information such as names or e-mail addresses from readers. No visitor analytics tool is used on this site.
Our hosting provider may keep technical logs containing IP addresses and request details to serve and secure the site. Language and theme preferences exist only for site function (see Cookie policy).
The admin panel is for staff only: for staff accounts we process name, e-mail, password hash, role and audit records (including the IP address of the person acting) for admin panel security and editorial accountability.
If you write to us by e-mail, the message and your e-mail address are used only to answer incoming enquiries and applications and to conclude content removal/correction requests.
Legal basis
For answering enquiries and applications and concluding content removal/correction requests, the legal basis is the data subject's request and the controller's legitimate interest (KVKK Art. 5).
For the admin panel security record (the IP address in the audit log), the legal basis is the controller's legitimate interest and the obligation to ensure data security (KVKK Art. 5).
Transfers (hosting, database and abroad)
The site and its database are hosted with third-party providers; technical logs and staff data may be processed by them. Only the images of some older stories load from the source publishers' servers, in which case your browser connects to those servers directly.
The host is Hostinger; the database is with Neon (AWS Frankfurt region).
The servers of our hosting and database providers are located outside Türkiye; your personal data may therefore be transferred abroad.
Retention periods
Incoming e-mail correspondence is kept for 1 year after the request is concluded. The IP address in admin panel audit records is kept for 90 days; expired IP addresses are cleared at the next successful sign-in to the admin panel, while the record itself (action, date, user) remains. The query part of addresses is not kept in error logs.
The host keeps its own server logs under its own policy.
Staff account details (name, e-mail, password hash, role) are kept for as long as the account is open. When an account is removed it is not deleted but deactivated: its sessions are closed and it can no longer sign in, while the account record continues to be kept because of its link to the audit records.
Your rights and how to apply
Under KVKK Art. 11 you have rights such as learning whether your personal data is processed, requesting information, requesting correction or deletion, and objecting.
Applications are accepted by e-mail only: burak.emen@proclust.com