Privacy Policy
What personal data this site collects, why and how long I keep it, who it is shared with, and how you can exercise your rights over it.
Last updated: 29 August 2026
1. Who is responsible
Your personal data is processed by Atakan Okul as the data controller, under Turkish Personal Data Protection Law No. 6698 (KVKK).
| Item | Detail |
|---|---|
| Data controller | Atakan Okul (sole proprietorship) |
| Activity | Graphic design, web design and video production services |
| Location | Sivas / Türkiye |
| [email protected] | |
| Website | atakanokul.com |
2. What data is collected
Data is collected only through the quote and contact forms. There are no user accounts.
a) Provided directly by you
- Identity and contact: name, email address, phone number, company or brand name if given
- Enquiry content: the service and package you are interested in, budget range, timing, and the message you write
b) Collected automatically
- Connection data: IP address and browser information
- Attribution data: the page you arrived on, the referring link, and any advertising parameters (utm_source, gclid, fbclid and similar)
- Consent record: the date and time you accepted this notice
This technical data is kept to verify who submitted a form, to prevent abuse such as automated spam, and to measure which work actually generates enquiries.
3. Why the data is processed
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and preparing a quote | Necessary for entering into or performing a contract |
| Maintaining communication once work begins | Performance of a contract |
| Preventing spam and abuse | Legitimate interest |
| Advertising and visit measurement | Your explicit consent |
| Statutory record-keeping | Compliance with a legal obligation |
4. Who the data is shared with
Your personal data is never sold or passed to third parties for marketing. It is shared only with the providers needed to deliver the service, and only as far as needed:
- Hosting provider: the server where the site and its database run
- Email provider: enquiry notifications are delivered to me by email
- WhatsApp: new-enquiry notifications reach my phone, if enabled
- Google Analytics and Meta: only if you have given consent. Contact details are transmitted to these services in hashed form.
- Cloudflare: during verification, if spam protection is enabled
Some of these providers are located outside Türkiye. Such transfers are carried out on the basis of your explicit consent under Article 9 of the KVKK.
5. How long the data is kept
- Enquiries that do not lead to work: 2 years from last contact
- Records relating to completed work: for the retention periods required by law (up to 10 years)
- Entries marked as spam: 6 months at most
- Technical security records (IP, attempt counters): 30 days
Once the period ends, records are deleted or irreversibly anonymised.
6. Cookies
The site itself does not require cookies to function. Google Analytics and Meta cookies are only set when advertising measurement is enabled. You can delete or block cookies in your browser at any time without affecting how this site works.
To remember which advertisement brought you here, a small record is kept in your browser's local storage for 30 days. It stays on your device and is not transmitted anywhere until you submit a form.
7. Your rights
Under Article 11 of the KVKK you may ask me to:
- Confirm whether your personal data is being processed, and obtain information about it
- Explain the purpose of processing and whether the data is used accordingly
- Identify any third parties in Türkiye or abroad the data has been transferred to
- Correct incomplete or inaccurate data
- Erase or destroy the data
- Notify third parties of any correction or erasure
- Object to a decision produced solely by automated analysis that works against you
- Claim compensation for damage arising from unlawful processing
Send requests to [email protected]. They are answered free of charge within 30 days at the latest. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.
8. Security
The site is served over HTTPS only. Enquiry records are stored in a directory that is not reachable from the web, the admin panel is password protected, and login attempts are rate limited. That said, no transmission over the internet can be guaranteed to be completely secure.
9. Changes
This notice is updated when needed. The date at the top of the page reflects the most recent change.
This text is provided for information and is based on a general template. As your operations or data processing change, having it reviewed by a lawyer is recommended.