This notice is provided under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It covers visitors to hasancansolakoglu.com and people who contact me or work with me.
1. Data controller
Hasan Can Solakoğlu, Sole proprietorship (şahıs işletmesi)
Tax office and ID: Susurluk Tax Office (Susurluk Vergi Dairesi), 7730560333
Address: Han Mah. Nuribey Cad. Mizey Apt No: 27/3, 10600 Susurluk, Balıkesir, Türkiye
Email: [email protected]
Phone: +90 543 541 87 04
2. Personal data processed
- Contact and communication data: name, email address, phone number, message content and project details you choose to share.
- Transaction data (clients only): name or company, address, tax ID, invoice and payment records.
- Technical and security data: IP address, request time, browser and device information and security events, processed by the hosting provider.
- Aggregate usage data: page views and performance measurements from cookieless web analytics.
3. Purposes and legal bases
- Operating and securing the website, and diagnosing errors: Article 5/2(f), legitimate interests, without harming your fundamental rights and freedoms.
- Replying to inquiries and discussing potential work: Article 5/2(c) where needed to prepare a contract at your request, otherwise 5/2(f).
- Performing contracts with clients: Article 5/2(c).
- Invoicing, tax and accounting records: Article 5/2(ç), legal obligation.
- Establishing, exercising or defending legal claims: Article 5/2(e).
I do not process special categories of personal data and ask you not to send them. Processing does not depend on your consent; where consent would be needed, I will ask separately.
4. Method of collection
Technical data is collected automatically when you load the site. Contact and transaction data is collected when you email, phone or message me or enter into an engagement.
5. Recipients and transfers abroad
Personal data may be shared with service providers who process it for the purposes above: Cloudflare (hosting, DNS, email routing and analytics), Google (email mailbox), banks and payment providers (for invoices and payments), my accountant, public authorities where the law requires, and, only if a client agrees, the AI tool providers used on that client's project. These providers operate internationally, so a transfer abroad can occur. Transfers abroad follow Article 9 of Law No. 6698 (as amended), which permits them on the basis of an adequacy decision, appropriate safeguards such as standard contracts notified to the Personal Data Protection Board, or, in limited cases, explicit consent. I do not sell personal data.
6. Retention
Correspondence that does not lead to a contract is kept for up to three years after the last contact. Contract, invoicing and accounting records are kept for the period required by Turkish tax and commercial legislation (five years under Tax Procedure Law Art. 253, counted from the start of the following calendar year; up to ten years for commercial books under Turkish Commercial Code Art. 82). Security logs are kept according to the provider's settings. After that, data is deleted, destroyed or anonymised.
7. Your rights under Article 11
You may apply to the data controller to:
- learn whether your personal data is processed;
- request information if it has been processed;
- learn the purpose of processing and whether it is used accordingly;
- know the third parties in Türkiye or abroad to whom it is transferred;
- request correction if it is incomplete or inaccurate;
- request deletion or destruction where the conditions in Article 7 are met;
- request that these actions be notified to third parties to whom the data was transferred;
- object to a result against you that arises solely from automated analysis;
- claim compensation for damage caused by unlawful processing.
8. How to apply
Send a written application with your name, signature, Turkish ID number (or nationality and passport number if you are a foreign national), address for notification and the request, either by hand, through a notary or by registered mail to Han Mah. Nuribey Cad. Mizey Apt No: 27/3, 10600 Susurluk, Balıkesir, Türkiye, or by email to [email protected] from the address you have previously used to correspond with me (or with a secure electronic signature). Applications are answered free of charge within 30 days at the latest; a fee may apply if the answer requires more than ten pages or a storage medium, as set by the Personal Data Protection Board's tariff.
If your application is rejected, the answer is insufficient or you receive no reply in time, you may complain to the Personal Data Protection Board ↗ within 30 days of learning the answer and in any case within 60 days of applying.