/ privacy
Privacy Notice
Türkçe: Kişisel Verilerin Korunması Aydınlatma Metni
In short: this website uses no cookies, no analytics and no tracking, and has no forms. We only process personal data when you email us, and in the standard technical logs our hosting provider keeps to run the site securely.
1. Who is responsible for your data
The data controller is Barış Yüncüler, a sole proprietor operating as Barış Yüncüler Danışmanlık Hizmetleri (Barış Yüncüler Consultancy Services). Address: Koza 66A/163, Çankaya, Ankara, Türkiye. Email: barisyunculer@barisyunculer.com.
This notice is provided under Article 10 of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and, for visitors in the European Union, Articles 13 and 14 of the General Data Protection Regulation (GDPR).
2. What we process and why
When you visit the website. Our hosting provider's servers automatically record technical data in log files: IP address, date and time of the request, the page requested, browser and device type, and the referring page. This data is used only to deliver the website, keep it secure and investigate misuse.
When you email us. We process the details you choose to send: typically your name, email address, organisation, role, and the content of your message and any attachments. We use them to answer your enquiry, assess whether we can help, prepare proposals and, if we work together, to deliver and administer the engagement.
We do not use your data for automated decision-making or profiling, and we do not sell it.
3. Legal basis
- Server logs: our legitimate interest in operating a secure website (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)), and legal obligations that apply to hosting and electronic communications (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).
- Correspondence: steps taken at your request before entering into a contract, or performing a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)), and our legitimate interest in responding to professional enquiries (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).
- Records we must keep: compliance with legal obligations, for example commercial and tax record-keeping (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)).
Please do not send special categories of personal data (such as health data) by email unless it is strictly necessary for your enquiry.
4. Who receives your data
Your data is accessed only by us and, to the extent necessary, by our hosting and email service provider, professional advisers bound by confidentiality (such as accountants or lawyers), and public authorities where the law requires it. If you ask us to involve a partner in your enquiry, we share only what is needed and only with your knowledge.
Transfers abroad. This website and our email service are provided through our hosting provider in Türkiye; operating this website does not involve transferring your personal data abroad.
AI tools. We may use AI tools when reviewing documents you send us. Before we do, personal data in those documents is removed or anonymised wherever possible. Your personal data is not shared with these tools without your knowledge and permission. Where sharing personal data is necessary, you will be told in advance that the providers’ servers are located abroad, and any transfer will be made only in line with Article 9 of KVKK and, where applicable, Chapter V of the GDPR.
5. How long we keep it
- Server logs: for the period our hosting provider retains them for security purposes and as required by applicable law, after which they are deleted.
- Enquiries that do not lead to an engagement: up to 2 years after our last contact, then deleted.
- Engagement records: for the duration of the engagement and the statutory retention periods that follow (for example under commercial and tax law).
6. Cookies
This website does not set cookies and does not use analytics, advertising or social-media tracking. Fonts and images are served from our own server, so visiting the site does not send your data to third-party font or content services. The light/dark switch works only for your current visit and stores nothing on your device. If this changes, we will update this notice and ask for your consent where the law requires it.
7. Your rights
Under Article 11 of KVKK you have the right to: learn whether your personal data is processed; request information about the processing; learn its purpose and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request its deletion or destruction under Article 7; request that third parties be notified of corrections or deletions; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.
If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with your local data protection authority. In Türkiye, complaints may be made to the Personal Data Protection Board after first applying to us.
8. How to exercise your rights
Send your request in writing to the address above, or by email from the address you have used to contact us, to barisyunculer@barisyunculer.com, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Please include your name, contact details and a description of your request. We will respond free of charge within 30 days at the latest.
9. Changes to this notice
We will update this notice when the website or our processing changes, for example when new features are added. The date at the top shows the latest version.