Privacy Policy
This is my personal website. I keep the data I collect to the minimum needed to run it, and this page explains in plain language what that data is, why I need it and what your rights are.
Last updated:01Who is responsible
The data controller for gokhansalli.com is Gökhan Sallı, based in Türkiye. Personal data is processed in line with the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies to visitors from the European Union, the General Data Protection Regulation (GDPR).
02What data I process
The site has no user accounts. Data is only processed in the situations below:
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Giving a testimonial | Name, position, profile link, message, photo, gender | Publishing your testimonial with your permission. Gender is only used to pick a default avatar. | Explicit consent (KVKK 5/1, GDPR 6(1)(a)) |
| Contacting me | Name, email address, subject, message | Replying to your message | Legitimate interest (KVKK 5/2-f, GDPR 6(1)(f)) |
| Visiting the site | IP address, browser type, date and time of the request | Keeping the site secure and running | Legitimate interest (KVKK 5/2-f, GDPR 6(1)(f)) |
- Data
- Name, position, profile link, message, photo, gender
- Purpose
- Publishing your testimonial with your permission. Gender is only used to pick a default avatar.
- Legal basis
- Explicit consent (KVKK 5/1, GDPR 6(1)(a))
- Data
- Name, email address, subject, message
- Purpose
- Replying to your message
- Legal basis
- Legitimate interest (KVKK 5/2-f, GDPR 6(1)(f))
- Data
- IP address, browser type, date and time of the request
- Purpose
- Keeping the site secure and running
- Legal basis
- Legitimate interest (KVKK 5/2-f, GDPR 6(1)(f))
03Cookies & local storage
Visitors never receive a cookie. The site only stores your language choice in your browser. The single cookie below exists only for me, when I sign in to manage the site:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| language (local storage) | This site | Remembers your language choice | Until you clear it |
| admin_session | This site | Keeps the site owner signed in to the admin panel; never set for visitors | 7 days |
- Set by
- This site
- Purpose
- Remembers your language choice
- Duration
- Until you clear it
- Set by
- This site
- Purpose
- Keeps the site owner signed in to the admin panel; never set for visitors
- Duration
- 7 days
04Service providers & links
A few trusted providers help me run the site. They only process data on my behalf and for the purposes above:
- Database provider: stores testimonials and contact messages.
- Resend: delivers my email replies to your messages. Resend may process data in the United States.
- Hosting provider: serves the site and keeps short-lived server logs.
Fonts are served from this site, so no request is made to Google Fonts. The site links to LinkedIn, GitHub and Instagram; once you follow those links, their own privacy policies apply.
When a provider processes data outside Türkiye, the transfer is carried out in line with Article 9 of KVKK.
05How long I keep it
- Testimonials: until you ask me to remove them.
- Messages: as long as our conversation needs, and no longer than 2 years.
- Server logs: kept briefly by the hosting provider for security purposes.
06Your rights
Under Article 11 of KVKK and the GDPR, you have the right to:
- Learn whether your personal data is processed, and request information about it
- Learn the purpose of processing and whether it is used for that purpose
- Know the third parties your data is transferred to, in Türkiye or abroad
- Ask for incomplete or inaccurate data to be corrected
- Ask for your data to be deleted or destroyed
- Object to a result that is against you and arises solely from automated processing
- Claim compensation for damage caused by unlawful processing
- Withdraw your consent at any time
I reply to requests within 30 days at the latest. You can also lodge a complaint with the Turkish Personal Data Protection Authority (KVKK), or with your local supervisory authority if you are in the EU.
07Security
The site is served over HTTPS, it has no user accounts or passwords, and only I can add or change testimonials. No method of transmission over the internet is 100% secure, but I take reasonable measures to protect your data.
08Children
The site is not intended for children under 16, and I do not knowingly collect their data. If you believe a child has shared data with me, please get in touch and I will delete it.
09Changes to this policy
I may update this policy as the site changes. The "last updated" date at the top always shows the current version.
Questions or requests?
Send me a message to use any of your rights or ask anything about your data.