Privacy and Cookie Policy

The data controller is SDR Bilişim Hizmetleri Dijital Yazılım E-Ticaret Danışmanlığı İthalat İhracat Limited Şirketi (MERSIS No: 0757091176100001, address: Limonluk Mah. 2453 Sok. No: 3C, Yenişehir / Mersin). For any question or request about this policy or your personal data, you can write to Reach me on LinkedIn.

Contact Form

When you submit the form, your name, email address, message and, optionally, your company name, phone number and the service, package and timeline you chose are sent to me by email. This information is not stored in the site's database; it is kept only in the data controller's mailbox, to reply to you and to discuss a possible collaboration. The legal basis is that the processing is directly related to the conclusion of a contract under KVKK Article 5(2)(c), and legitimate interest under Article 5(2)(f).

This correspondence is deleted within one year at the latest after the purpose of the contact has ended; if it turns into a collaboration, it is kept for the legally required retention periods.

Security and Abuse Prevention

To protect the contact form against automated submissions, the sender's IP address is kept only in the server's memory and only for one hour; it is not written to a database or a file. The web server may also keep standard access logs (IP address, visited address, browser information, time) for security and debugging. The legal basis is legitimate interest under KVKK Article 5(2)(f).

Visit Statistics

If you choose “Accept all” in the cookie notice, Umami, an open source analytics tool running on my own server, is loaded to understand which pages of the site are read. Umami uses no cookies and does not store your IP address; it records information such as the page address, referring site, browser, operating system, device type and country as anonymous statistics. This data is not shared with third parties. The legal basis is your explicit consent; if you choose “Reject all”, Umami is not loaded at all.

Blog Post View Counts

For the view count shown on blog posts, when you open a post, a one-way hash (HMAC-SHA256) of your IP address, made with a secret key, is stored in the site's database together with the post's ID. Your IP address itself is not stored and cannot be recovered from this hash. The hash is used only to avoid counting the same visitor twice on the same post; it is not matched with any other data, not used for profiling and not shared with third parties. Search engine bots are not counted. These records are kept for as long as the post stays published and are deleted together with the post. The legal basis is legitimate interest under KVKK Article 5(2)(f).

Newsletter

When you enter your email address in the newsletter form on the blog, your address is stored in the site's database as a subscriber awaiting confirmation, and a confirmation email is sent to you. If you do not confirm, you receive no newsletter, and unconfirmed addresses are deleted automatically after 30 days. If you confirm, you receive an email when I publish and send a new post. Your IP address is not stored for the subscription; your address is not used for any other purpose and is not shared with anyone. You can unsubscribe at any time with the link at the bottom of every email; once you do, no more newsletters are sent to your address. I do not track whether emails are opened or links are clicked. The legal basis is your explicit consent under KVKK Article 5(1).

Software Health Check

Your answers and result in the software health check (/en/assessment) are calculated only in your browser; they are not sent to the server and not stored.

This site uses only records that it needs to work and that remember your preferences. There are no advertising or tracking cookies.

To change your choice, simply delete this site's cookies in your browser; the notice appears again on your next visit. The site's fonts are loaded from the site's own server; opening a page sends no request to a third-party service such as Google Fonts.

Messages from the contact form are delivered and stored through Google Workspace, which I use as my email service. Since Google's servers may be located abroad, this means personal data is transferred abroad. The same applies when you email me directly.

Newsletter emails are sent through Mailgun, which runs on servers in the European Union. Only your email address and the content of the email are passed to Mailgun for sending; bounced addresses and addresses that file complaints are reported back to me.

The WhatsApp button at the bottom right is only a link; no data goes to WhatsApp unless you click it. If you click it and write to me on WhatsApp, your message and phone number are processed by WhatsApp (Meta) under its own privacy policy and on its servers abroad.

Under Article 11 of KVKK, you have the right:

• To learn whether your personal data is being processed
• To request information about the processing, if it has been processed
• To learn the purpose of the processing and whether the data is used in line with that purpose
• To know the third parties, in Türkiye or abroad, to whom the data has been transferred
• To request correction if the data has been processed incompletely or incorrectly
• To request deletion or destruction of the data under the conditions set out in the Law
• To request that corrections and deletions be notified to the third parties to whom the data has been transferred
• To object to a result against you that arises from analysis of the data by automated systems
• To claim compensation if you suffer damage because the data has been processed unlawfully

To exercise these rights, you can write to the email address above or send your application in writing to the company address. Your request is concluded free of charge within thirty days at the latest.

If the site starts a new data processing activity, this page is updated and the “Last updated” date at the top changes.