This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform you about the personal data processed on yakupbilgin.com. The Turkish version of this notice prevails in case of any discrepancy.
1. Data controller
The data controller is Yakup Bilgin. Contact: [email protected].
2. Personal data processed
- Identity and contact: full name, email address, (optional) phone number and company / institution name.
- Request and transaction data: message subject and content; PCB request type, project name, quantity, description, technical preferences, request number and the date you confirmed this notice.
- Uploaded files: Gerber archive, BOM / CPL files, board photos or drawings.
- Transaction security: IP address (kept only as a one-way hash in abuse counters), date and time, browser and device information, server and Cloudflare logs.
- Preference data: the language preference in your browser’s local storage (“yb_lang”); it is not sent to the server.
3. Purposes of processing
- Receiving and answering contact requests;
- Evaluating PCB manufacturing, reverse engineering and design requests, preparing quotes, and carrying out orders and the work;
- Running information security processes and preventing spam and abuse;
- Presenting the site in the preferred language;
- Complying with legal obligations and protecting rights in case of a dispute.
4. Method of collection and legal bases
Your personal data is collected electronically, partly by automated means, through the contact and PCB request forms, security cookies, and server and Cloudflare logs. It is processed on the following legal bases under Article 5(2) of the KVKK:
- (c) processing is necessary, provided that it is directly related to the conclusion or performance of a contract, for the parties to the contract — requests, quotes and orders;
- (ç) processing is necessary for the controller to comply with a legal obligation — statutory retention and reporting obligations;
- (e) processing is necessary for the establishment, exercise or protection of a right;
- (f) processing is necessary for the legitimate interests of the controller, provided that it does not harm your fundamental rights and freedoms — site security, abuse prevention and remembering your language.
5. Transfers of personal data
Limited to the purposes above, your personal data may be transferred to the hosting provider in Türkiye where the site is hosted, to Cloudflare, Inc., which provides content delivery, security and cookieless visitor statistics, and to the site owner’s email service provider; it is transferred to legally authorised public authorities only upon request and to the extent required by law. Because the servers of Cloudflare and the email provider may be located abroad, these transfers are made in accordance with the procedures in Article 9 of the KVKK, relying on safeguards such as the standard contractual clauses offered by the service providers.
6. Retention periods
Messages stored on the site are deleted automatically after 180 days, and PCB requests with the “Cancelled” status 90 days after their last change. Other requests are kept while the work continues and until you ask for deletion, and records with a statutory retention period are kept for that period. At the end of the period, the data is deleted, destroyed or anonymised.
7. Your rights (KVKK Art. 11)
By applying to the data controller, you have the right to:
- a) learn whether your personal data is processed,
- b) request information if your personal data has been processed,
- c) learn the purpose of processing and whether the data is used in line with that purpose,
- ç) know the third parties in Türkiye or abroad to whom your personal data is transferred,
- d) request correction if your personal data is incomplete or inaccurate,
- e) request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
- f) request that the actions under (d) and (e) be notified to the third parties to whom your personal data was transferred,
- g) object to a result against you arising exclusively from the analysis of the processed data by automated systems,
- ğ) claim compensation if you suffer damage due to unlawful processing of your personal data.
8. How to apply
In line with the Communiqué on the Procedures and Principles of Applications to the Data Controller, send your request to [email protected], clearly stating it and including information sufficient to verify your identity (your full name and the email address you used on the form). Your request will be concluded free of charge as soon as possible and within 30 days at the latest; if the action requires an additional cost, the fee schedule set by the Personal Data Protection Board may apply. If your request is rejected, you find the answer insufficient, or no answer is given in time, you may file a complaint with the Personal Data Protection Board.