This is the personal website of Ozan Altinbas, an independent Salesforce Commerce Cloud (SFCC) Technical Architect based in Izmir, Türkiye. This notice explains what personal data the site processes, why, who receives it, and your rights under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

Data controller

Ozan Altinbas, Izmir, Türkiye — email ozan.altinbas@ymail.com.

What is processed, and why

When you use the contact form

Data: your name, email address, subject and message, and — for spam and abuse prevention — your IP address.
Purpose: to read and answer your enquiry and, if you want to, discuss an engagement.
Legal basis: steps taken at your request before a possible contract, and the legitimate interest in answering messages and keeping the form free of abuse (KVKK Art. 5(2)(c) and (f); GDPR Art. 6(1)(b) and (f)).
How: the message is delivered by email through Google (Gmail). The form is protected by Cloudflare Turnstile, which processes your IP address and browser signals to tell people from bots. Your IP address is also counted briefly in server memory to limit repeated submissions.
Retention: messages are kept only as long as needed to handle the enquiry and any work that follows from it, and are then deleted.

Analytics — only if you accept

Data: Google Analytics 4 records pages viewed, approximate location, device and browser details and the referring page, and sets its own cookies (such as _ga).
When: only after you choose Accept in the analytics banner. Until then, nothing from Google Analytics is loaded.
Legal basis: your explicit consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)). You can withdraw it at any time with the Analytics preference control in the footer of every page.
Your choice itself is stored in your browser's local storage (analytics-consent). It is not a cookie and is never sent to this site's server.

Hosting

The site is hosted on Vercel. Like any web server, it processes your IP address and request details (address requested, browser, time) to deliver pages and keep the service secure, under Vercel's own retention rules. Legal basis: the legitimate interest in operating a secure website (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).

Who receives the data

Recipient	Role	When
Google LLC	Email delivery (Gmail); Google Analytics	Contact form; analytics only with consent
Cloudflare, Inc.	Turnstile bot protection	Contact form
Vercel Inc.	Hosting	Every visit

Personal data is not sold, and this site does no advertising profiling.

Transfers abroad

These providers are based in the United States and may process data outside Türkiye and the European Union. Transfers take place under the safeguards the providers offer and, for analytics, on the basis of your consent.

Your rights

Under KVKK Article 11 you can ask whether your personal data is processed and request information about it; learn the purpose of processing and whether it is used for that purpose; know the third parties in Türkiye or abroad it is transferred to; ask for incomplete or incorrect data to be corrected, and for data to be deleted or destroyed, and for third parties to be notified of either; object to a result reached against you solely through automated analysis; and claim compensation for damage caused by unlawful processing.

Under the GDPR, if it applies to you, you can request access, rectification, erasure, restriction or portability of your data, object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing.

To use any of these rights, email ozan.altinbas@ymail.com. Requests are answered free of charge and within 30 days. You can also complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU, to your local data protection authority.

Changes

If the way this site handles personal data changes, this page changes with it; the date at the top shows the latest version.

Privacy Policy