Personal Data Notice
Controller, purposes, recipients and application rights under Turkish Law No. 6698.
Updated: 4 November 2026
Controller
İlkay Beydah Sağlam is the controller of the personal website beydahsaglam.com. Contact and personal-data requests: work@beydahsaglam.com. This notice explains website processing under Article 10 of Turkish Personal Data Protection Law No. 6698. It is an information notice, not a consent form.
Data, purposes and grounds
| Activity | Data and purpose | Ground under Law No. 6698 |
|---|---|---|
| Contact request | Name, email and message to consider and answer the request | Legitimate interest in correspondence and request handling, provided fundamental rights are not harmed; Article 5/2-f |
| Administrator access | Account and session data to prevent unauthorised content-management access | Legitimate interest in service and account security; 5/2-f |
| Access and abuse prevention | Connection information and a short-lived keyed security counter to operate and protect the service | Legitimate interest in service security; 5/2-f |
| Data-subject applications | Necessary identity-verification information and the application to fulfil statutory requests | Compliance with a legal obligation; 5/2-ç |
The persistent measurement result contains daily page, event and error totals without visitor profiles. Connection information can still be processed by infrastructure and security systems. Processing is limited to necessary information; special-category data is not requested. Article 5/2-e may also be assessed where a record is genuinely necessary to establish, exercise or protect a right; it is not a general justification for unlimited retention.
Collection and recipients
Data is collected electronically through forms, administrator login, browser requests and email. Supabase stores messages in an administrator-only inbox. Vercel supplies hosting; Supabase supplies database/authentication; Resend supplies notifications; Cloudflare supplies DNS/email routing; Google Gmail supplies the receiving mailbox. Opening external music media may allow that provider to process connection information. Necessary information may be disclosed to competent authorities when legally required.
Providers may process information on infrastructure outside Türkiye. Article 9 requires applicable transfer conditions and safeguards. Publishing this notice does not itself establish them, and this notice does not assert that a standard contract has been signed and notified.
Retention and preferences
View aggregates are retained for 90 days and error totals for 30, with daily cleanup. Short-lived security counters are kept separately. Correspondence is considered for request handling and applicable legal needs; measurement deletion periods do not apply to messages or email copies. The Privacy Policy explains browser preferences, external media and disabling optional counters.
Rights and applications
Under Article 11 you may ask whether your data is processed, obtain information, learn the purpose and its proper use, learn recipients, request correction, request deletion or destruction where the conditions apply, and request notification of such actions to recipients. You may object to an adverse result based solely on automated analysis and seek compensation for unlawful processing.
Send your name, a reply method and your request to work@beydahsaglam.com. Necessary, proportionate identity verification may be requested; do not attach identity documents or sensitive data to the initial email. Statutory application methods remain available. Requests are handled as soon as possible and within 30 days, subject to any fee exceptions permitted by the applicable rules.