Privacy Notice
Last updated: 24 October 2026
This notice explains how personal data of visitors to oguzcigtekin.com and people who contact me through it is processed, in line with Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, for visitors in the EU/EEA and UK, the GDPR. Cookies are covered in the Cookie Policy. The Turkish KVKK Aydınlatma Metni is the authoritative version.
1. Data controller
Oğuz Çığtekin, as an individual, Istanbul, Türkiye. Contact: oguzcigtekin@gmail.com
2. Data I process
- Contact form: name, email address, company / brand (optional), topics you are interested in and your message.
- Checklist form: your email address.
- Technical details saved with a form: the page you sent it from, site language, time of submission and, if present in the link, campaign source (UTM) parameters.
- Booking: what you share when booking a call via Calendly.
- Security: IP address and browser information in the hosting provider's server logs.
- Analytics: only if you allow cookies, pages visited and device information (Google Analytics).
- Marketing: only if you allow marketing cookies, pages visited, whether you submitted a form, and browser/device information (Meta Pixel, TikTok Pixel, Google Ads). Your name and message are not sent to these platforms; only to Google Ads, for ad measurement, the email address from the form is sent in irreversibly hashed form.
- Meta (Facebook / Instagram) lead form: if you fill in the form in one of my ads, the name, email, company and answers you share there.
No special categories of data (health, religion, biometrics, etc.) are requested; please do not include them in your message.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry or checklist request, scheduling calls, pre-contract discussions | Steps prior to a contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Keeping and following up records of requests; site security | Legitimate interest (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Legal obligations and the establishment, exercise or defence of legal claims | KVKK art. 5/2-ç and 5/2-e; GDPR art. 6(1)(c) and (f) |
| Visit statistics (analytics cookies), measuring my ads and showing ads to site visitors (marketing cookies), showing the Spotify player | Your consent (KVKK art. 5/1; GDPR art. 6(1)(a)). Declining does not affect your use of the site. |
I do not send marketing or newsletter emails. Your email address is used only to reply to your request. If I ever want to send such emails, I will ask for your separate, explicit consent first. My newsletter is published on LinkedIn; you subscribe there and LinkedIn sends it.
4. Sharing and international transfers
Your data is never sold. If you allowed marketing cookies, only a hashed form of your email address is sent to Google for ad measurement; your name and message are never shared for advertising. It is processed only by these service providers:
| Provider | Purpose | Server location |
|---|---|---|
| Vercel Inc. | Hosting and form processing | USA / EU |
| Supabase Inc. | Database where form requests are stored | Germany (Frankfurt) |
| Resend (Plus Five Five Inc.) | Notifying me of a form request by email | USA |
| Google LLC | My email (Gmail); with your consent, Google Analytics / Tag Manager / Google Ads | USA and other countries |
| Calendly LLC | Scheduling, if you use the Calendly page | USA |
| Meta Platforms Ireland Ltd. | With your consent, Meta Pixel (ad measurement); lead form answers if you fill in a Meta ad form | Ireland / USA |
| TikTok Technology Ltd. | With your consent, TikTok Pixel (ad measurement) | Ireland / USA / Singapore |
| Make (Celonis) | Passing Meta lead form answers to my request database | EU |
| Spotify AB | Podcast player, only if you click it | Sweden / EU |
As these servers are located outside Türkiye, your data is transferred abroad in accordance with KVKK art. 9 and, where applicable, GDPR Chapter V. Data may also be disclosed to public authorities where legally required.
5. Retention
Enquiries are kept for up to 2 years after they are concluded, checklist requests for up to 1 year. If we work together, records are kept for the periods required by law (e.g. 10 years for commercial records). Data is then deleted, destroyed or anonymised. I can delete your data earlier on request.
6. Your rights
You may request access to, correction or deletion of your data, learn who it has been shared with, object to processing, withdraw consent at any time, and claim compensation for unlawful processing (KVKK art. 11). Under the GDPR you may also request restriction and portability and lodge a complaint with your supervisory authority. Write to oguzcigtekin@gmail.com from the address you used in the form; I reply within 30 days, free of charge.