GDPR DATA PROTECTION NOTICE

This GDPR Data Protection Notice complements the Privacy Policy and explains how personal data may be processed when visitors access aliosman.com.tr from jurisdictions where GDPR or similar data protection rules may apply.

1. Data Controller

The data controller for this personal website is Ali Osman KAHRAMAN. Data protection requests may be submitted through the contact page.

2. Categories of Personal Data

The website may process contact information submitted by you, message content, technical server logs, IP address, browser and device information, usage data, cookie preferences and other data required for website security and communication.

3. Purposes of Processing

• To respond to contact form submissions and communication requests.
• To operate, maintain and secure the website.
• To detect and prevent abuse, spam, unauthorized access or security incidents.
• To analyze website performance and improve user experience where analytics tools are enabled.
• To comply with legal obligations and lawful requests.

4. Legal Bases

Processing may rely on one or more of the following legal bases: your consent, performance of a communication or service request initiated by you, compliance with legal obligations, and legitimate interests such as website security, service continuity, prevention of abuse and improvement of website functionality.

5. Recipients and Service Providers

Personal data may be processed by hosting providers, technical infrastructure providers, security tools, analytics services or communication services where necessary. Data may also be disclosed to competent authorities when required by applicable law.

6. International Transfers

Some service providers or infrastructure components may be located outside your country. Where international transfers occur, they are limited to what is necessary for website operation, security, analytics or communication and are handled according to applicable data protection requirements.

7. Retention Period

Personal data is retained only for as long as necessary for the purposes described in this notice, including responding to requests, maintaining communication records, ensuring security, resolving disputes and complying with legal obligations.

8. Your GDPR Rights

Subject to applicable conditions and limitations, you may have the following rights:

• Right to access your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure, also known as the right to be forgotten.
• Right to restriction of processing.
• Right to object to processing based on legitimate interests.
• Right to data portability where applicable.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a competent supervisory authority.

9. Automated Decision-Making

This website does not use personal data submitted through the contact form for automated decision-making that produces legal or similarly significant effects.

10. How to Exercise Your Rights

You may submit a data protection request through the contact page. To protect privacy and security, identity verification or additional information may be requested before fulfilling certain requests.