This policy explains how your personal data is processed when you visit yakupbilgin.com and use its forms. For the detailed notice under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), see the KVKK Privacy Notice; for cookies, see the Cookie Policy. If you visit from the European Union, your rights under the General Data Protection Regulation (“GDPR”) are also listed below.
Data controller
The data controller is the site owner, Yakup Bilgin. For any privacy matter, contact [email protected].
What data do we process?
- Contact form: your name, email address, (optional) subject and message. The message is stored on the site and forwarded to the site owner by email.
- PCB request form: full name, email, (optional) phone number and company / institution; request type, project name, quantity, description and technical preferences; the files you upload (Gerber archive, BOM / CPL files, board photos or drawings) and the date you confirmed this notice. Your request receives a request number and a confirmation email is sent to your address.
- Technical data: with every request, your IP address, date and time, requested page, browser and device information (user agent) and referring page are processed in the logs of the hosting server and Cloudflare. To prevent abuse of the forms, your IP address is kept only as a one-way hash in short-lived counters.
- Language preference: the language the site opens in (Turkish / English) is stored only in your browser’s local storage (localStorage, “yb_lang”); it is not sent to the server.
- Admin area: WordPress session cookies are used only for the site owner’s login; visitors are never asked to create an account.
The site does not use advertising, retargeting or cross-site tracking tools, and personal data is never sold.
Why do we use your data?
- To answer your message or request, prepare a quote, carry out the order and the work, and communicate with you;
- To keep the site secure, prevent spam and abuse, and fix errors;
- To show the site in your preferred language;
- To improve the site using aggregated statistics that do not identify you (such as visitor counts);
- To comply with legal obligations and to protect rights in case of a dispute.
Legal bases
Under Article 5(2) of the KVKK, your data is processed because it is directly related to the conclusion or performance of a contract (answering your request, quotes and orders — item c), to comply with a legal obligation (item ç), to establish, exercise or protect a right (item e), and for the controller’s legitimate interests (site security, abuse prevention and remembering your language — item f). Under the GDPR, the corresponding bases are Art. 6(1)(b) (contract), Art. 6(1)(c) (legal obligation) and Art. 6(1)(f) (legitimate interests). The checkbox on the forms confirms that you have read this notice.
Sharing and international transfers
Your data is shared only with the following service providers, and only as far as the service requires:
- Hosting: the site and its database run on the servers of a hosting provider located in Türkiye; form records and uploaded files are stored there.
- Cloudflare, Inc.: the site’s content delivery network (CDN), security (DDoS and bot protection) and cookieless Web Analytics. Because requests pass through Cloudflare’s global network, your IP address and request data may be processed outside Türkiye (including the United States).
- Email service: form notifications and correspondence go through the site owner’s email account; the email provider’s servers may be located abroad.
- Authorities: only where required by law and only to the extent required.
International transfers are made in accordance with Article 9 of the KVKK and Chapter V of the GDPR, relying on safeguards such as the standard contractual clauses offered by the service providers.
Retention periods
- Contact form: messages stored on the site are deleted automatically after 180 days. Replies and correspondence stay in the mailbox while the conversation continues and are deleted on request.
- PCB requests: requests with the “Cancelled” status are deleted automatically, together with their uploaded files, 90 days after their last change. Other requests are kept while the work continues and until you ask for deletion; documents with a statutory retention period (such as invoices) are kept for that period.
- Abuse counters: the IP hash is deleted within a few days at the latest.
- Server and Cloudflare logs: for the limited period set by the service providers.
- Language preference (localStorage): until you clear the site data in your browser.
Security
The site is served over HTTPS only. Files uploaded with the PCB request form are stored under random names in a non-public folder, are never published directly and can be downloaded only by the site owner from the admin area. The forms are protected against spam. Still, no transmission over the internet can be guaranteed to be completely secure, so please do not send highly confidential information through the forms.
Your rights
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether the data is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data, and deletion or destruction under Article 7 of the KVKK, and to request that these actions be notified to the third parties concerned; to object to a result against you that arises exclusively from automated processing; and to claim compensation for damage caused by unlawful processing.
Under the GDPR, you also have the rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability and objection to processing based on legitimate interests, and you may lodge a complaint with the data protection authority of your country of residence.
Send your request to [email protected] with information that allows us to verify your identity. Requests are answered free of charge within 30 days at the latest. Your right to complain to the Turkish Personal Data Protection Board is reserved.
External links
Links to projects, app stores (such as Google Play) and social media lead to other websites, which have their own privacy policies; data is sent to them only when you click such a link.
Children’s privacy
The site is not directed at children under 16. If you are under 16, please do not use the forms without your parent’s or guardian’s knowledge; if we learn that we have received such data, we will delete it.
Changes and contact
This policy is updated when necessary; the date of the last update is shown at the top of the page. Questions: [email protected].