Privacy Policy

1. Data Controller and Scope

This website is operated by Doğukan Ersan for personal presentation, showcasing software projects, publishing blog content, and communicating with visitors.

• Website: dogukanersan.com
• Contact: [email protected]

The identity and contact details of the data controller for relevant processing activities should be assessed in accordance with applicable law. This policy covers website visits, contact requests, security operations, and website analytics.

2. Categories of Personal Data

Depending on how you use the website, the following categories of data may be processed:

• Contact data: Your name, email address, and message submitted through the contact form.
• Request data: The subject of your inquiry, submission time, and information needed to manage the response.
• Technical data: IP address, browser type, operating system, request time, referring page, response code, and similar server records.
• Usage and analytics data: Pages viewed, visit times, session or visit counts, and website performance measurements.
• Security data: Technical signals relating to automated requests, unusual traffic, abuse attempts, and security checks.
• Cookie and similar technology data: Records generated by such technologies, depending on the tools used and your preferences.

Please avoid submitting special-category personal data or sensitive information that is not necessary to handle your inquiry.

3. Purposes of Processing

To the extent permitted by applicable law and subject to an appropriate legal basis for each activity, personal data may be processed to:

• Receive, assess, and respond to contact requests.
• Operate the website and troubleshoot technical issues.
• Detect or prevent unauthorized access, abuse, automated spam, and attempted attacks.
• Evaluate visitor trends and website performance through aggregated statistics.
• Improve website content, accessibility, and user experience.
• Meet legal obligations and respond to competent authorities where required.
• Establish, exercise, or defend legal claims and resolve disputes.

4. Legal Bases for Processing

Under Türkiye's Personal Data Protection Law No. 6698 (KVKK), the appropriate legal basis must be assessed separately for each processing activity. Depending on the circumstances, legal bases may include:

• Processing expressly provided for by law.
• Processing directly necessary for the establishment or performance of a contract.
• Processing necessary for compliance with a legal obligation.
• Processing necessary to establish, exercise, or protect a right.
• Processing necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed.
• Where required, your valid and specific explicit consent.

These legal bases do not automatically apply to every category of data. The applicable basis depends on the data, the purpose, and the specific processing activity.

5. Contact Form and Email

Information submitted through the contact form may be used to review your message, respond to you, and maintain the correspondence necessary to handle your request.

Rate limiting, verification mechanisms, and security services such as Cloudflare Turnstile may be used to prevent spam and abuse. While operating, these services may process technical data in accordance with their own privacy policies and configurations.

Emails you send may be retained as necessary to respond and manage the relevant communication. Your contact information is not used for unrelated advertising or marketing purposes.

6. Cookies and Similar Technologies

The website may use cookies or similar technologies to provide essential functionality, maintain security, remember preferences, or generate statistics.

Depending on their function, these technologies may fall into the following categories:

• Strictly necessary technologies: Technologies required for security, session management, request validation, and core website functionality.
• Preference technologies: Technologies used to remember language or similar user preferences.
• Analytics technologies: Tools used to measure visits and usage trends.
• Security technologies: Tools that help detect bots, spam, abuse, and unusual traffic.

These categories do not mean that every listed technology is necessarily active on the website. Actual cookies and similar technologies, their purposes, durations, and providers must be verified against the live configuration.

Where required, non-essential cookies or technologies will only be activated after the appropriate consent has been obtained. You can block or delete cookies through your browser settings, although doing so may affect certain preferences or website functions.

7. Google Analytics and Website Statistics

Analytics tools such as Google Analytics may be used to understand website usage and improve content. The availability, configuration, and scope of these tools may change over time.

Depending on the configuration, analytics tools may process page views, visit duration, device or browser information, and interactions. Collection practices depend on the settings used, your cookie preferences, and the relevant provider's practices.

Where required, analytics technologies should only be enabled after an appropriate consent mechanism has been provided. Please refer to Google's privacy documentation for further information about its data processing practices.

8. Visitor Counting, IP Addresses, and Technical Logs

Server logs and technical access records may be generated for website security, performance analysis, and visitor statistics. Such records may contain IP addresses, timestamps, requested resources, and similar information.

Visitor counting may use derived values, such as hashes generated from IP addresses. Hashing alone does not guarantee that data has been anonymized. Information that can be linked back to a person, directly or indirectly, may still qualify as personal data under applicable law.

Statistics may be assessed daily, weekly, monthly, or annually. Active visitor counts may be estimates and may not always represent unique individuals accurately. Data should be retained only for as long as necessary for the relevant purpose.

9. Cloudflare, Hosting, and Third-Party Services

The website may use Cloudflare services for DNS, content delivery, traffic filtering, DDoS protection, security checks, and form verification. While handling requests, these services may process technical data such as IP addresses, connection details, browser signals, and security logs.

The website may also rely on hosting, server management, email delivery, and other technical service providers. Personal data may be processed within their systems as necessary to provide the relevant services or maintain security.

Third-party data processing practices depend on each provider's services, contractual terms, and privacy documentation. The actual providers and data transfer arrangements should be determined from the live configuration.

10. Disclosure and International Transfers

Personal data may be shared with relevant service providers or legally authorized authorities to the extent necessary for technical services, security, responding to inquiries, or complying with legal obligations.

Some service providers may process data abroad or transfer data to systems located outside Türkiye. Where such transfers occur, the applicable conditions under Article 9 of KVKK and related regulations must be satisfied. This policy alone does not establish a legal basis for any international transfer.

11. Data Retention and Security

Personal data is retained for as long as necessary for the relevant purpose and in accordance with any applicable statutory retention periods. Once retention is no longer justified, data is deleted, destroyed, or anonymized as required by law.

Retention periods may differ by category and purpose. Correspondence, security records, analytics data, and server logs may each require different retention periods.

Appropriate technical and organizational measures are intended to protect data against unauthorized access, alteration, loss, or disclosure. However, absolute security of internet transmissions and electronic storage cannot be guaranteed.

12. Data Subject Rights Under KVKK

Subject to the applicable conditions under Article 11 of KVKK, you may have the right to:

• Learn whether your personal data is being processed.
• Request information about the processing of your personal data.
• Learn the purpose of processing and whether data is used in accordance with that purpose.
• Learn the third parties to whom your data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction where the conditions prescribed by law are met.
• Request notification of relevant correction, deletion, or destruction operations to third parties to whom the data was transferred.
• Object to a result arising against you from analysis performed exclusively through automated systems, where applicable.
• Claim compensation for damage caused by unlawful processing, where applicable.

You may submit a request to [email protected] in a form that allows your identity to be verified and clearly describes your request. Requests will be handled in accordance with the procedures and time limits set out in KVKK and applicable law.

Please do not send unnecessary sensitive information or identity documents. If additional verification is necessary, an appropriate and proportionate method may be used.

13. Children's Privacy

This website is not specifically designed as a service for children. It is not intended to knowingly collect children's personal data without the necessary legal conditions. If you believe a child's personal data has been submitted inappropriately, please contact us.

14. External Links

The website may contain links to other websites or third-party platforms. We may not control the content, security practices, cookies, or privacy policies of those websites. Please review their policies before visiting external links.

15. Intellectual Property and Website Use

Unless expressly stated otherwise, text, designs, logos, images, software projects, and other content on this website belong to their respective rights holders or are published under applicable usage rights.

Unauthorized copying, distribution, republication, or commercial use of content is subject to applicable law and the rights holders' permissions. The website must not be used for unlawful purposes, unauthorized access attempts, or activities that may disrupt its operation.

16. Disclaimer and Content Accuracy

Reasonable efforts are made to keep website content accurate and up to date. However, uninterrupted availability, error-free operation, or suitability for a particular purpose is not guaranteed. Decisions based on website content should be assessed in light of applicable law and the circumstances involved.

17. Changes to This Policy

This policy may be updated to reflect changes to website functionality, services, data processing activities, or applicable law. The current version will be published on this page. Significant changes may be announced separately where appropriate.

18. Contact

For questions about privacy, personal data processing, or requests under KVKK, you can contact us at: