This notice describes how AI Mevzuları processes your personal data under Türkiye’s Personal Data Protection Law (KVKK, Law No. 6698) and the EU General Data Protection Regulation (GDPR).
This notice is informational and is not legal advice. For a specific legal situation, please consult a qualified attorney.
- §01
Data Controller
- §02
What Data We Collect
a) Via the Contact Form
- Full name
- Email address
- Message content
b) Newsletter Subscription
- Email address
- Preferred language (TR / EN)
c) Automatically Collected Technical Data
- IP address (anonymized; for rate-limit and security; not retained)
- Browser info (device type, screen resolution)
- Pages visited
- Time on page
- Referrer link
d) Cookies
- Vercel Analytics (anonymous visit stats)
- Vercel Speed Insights (performance measurement)
- next-intl (language preference)
- next-themes (theme preference)
- §03
How We Use Your Data
- Replying to messages sent via the contact form
- Sending the weekly digest to newsletter subscribers
- Analyzing site traffic (who visited, how long, from where)
- Improving the performance of the site
- Blocking malicious access attempts (rate-limit)
- §04
Where Your Data Lives
- Supabase (Frankfurt, Germany — within the EU) — newsletter subscriptions and contact form logs
- Vercel (global edge) — site hosting and analytics
- Resend (USA) — newsletter and contact form mail delivery
- Upstash Redis (Frankfurt) — rate-limit counters
Your data is never shared or sold to third parties for marketing.
- §05
How Long We Keep It
- Contact form messages: 24 months
- Newsletter subscriptions: until you unsubscribe
- Anonymous analytics: 90 days (Vercel default)
- Rate-limit data: 1 hour (Upstash TTL)
- IP logs: 7 days
- §06
Your Rights (KVKK Art. 11 & GDPR Art. 15–22)
Under KVKK Article 11 — paralleling GDPR Articles 15 to 22 — you have the right to:
- Know whether your personal data is being processed
- Request information about how it is processed
- Learn the purpose and whether it is used in line with that purpose
- Know the third parties (in or outside Türkiye) the data is shared with
- Request rectification of incomplete or inaccurate data
- Request erasure or destruction
- Object to outcomes drawn purely from automated analysis that adversely affect you
- Claim damages if you suffer loss
To exercise these rights, send a written request to coskuneray7232@gmail.com. We respond within 30 days.
- §07
Cookies & Tracking
The cookies we use are listed below. On your first visit you are shown a consent banner; if you choose “Accept”, analytics cookies load. If you choose “Essential Only”, only the strictly necessary cookies are active.
Cookie list
Cookie Type Purpose Lifetime _vercel_analytics Analytics Anonymous visit stats 1 year _vercel_speed_insights Performance Page load measurement 1 year NEXT_LOCALE Preference Remembers language choice 1 year theme Preference Light / dark theme choice 1 year cookie-consent Essential Your consent decision 6 months Essential cookies (language, theme, consent) are required for the basic function of the site and are not subject to consent.
- §08
Data Security
- TLS 1.3 encryption (HTTPS)
- HSTS to enforce HTTPS
- Strict CSP (Content Security Policy) headers
- Rate-limit against bots and abuse
- Supabase Row-Level Security (RLS) on database access
- No password is stored in plaintext (bcrypt hash)
- §09
Children’s Privacy
We do not knowingly collect data from children under 13. If such data is collected inadvertently, it is deleted immediately upon parental request.
- §10
Changes to This Policy
When this policy is updated, the “Last updated” date at the top of the page changes. Material changes are also announced to newsletter subscribers by email.
- §11
Contact
Questions? coskuneray7232@gmail.com