Privacy Policy and KVKK Privacy Notice

1. Data Controller

Under the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Mert Dağ (the "Data Controller") as described in this notice.

Website: mertdag.com. Contact: agencycolen@gmail.com

2. Personal Data Processed

The only personal data processed on this site is what you provide yourself or what is generated technically during your visit:

• Identity: the first and last name you enter in the contact form.
• Contact: the email address you enter in the contact form.
• Request details: the project type, planned budget range and project details you write in the message field.
• Security data: IP address, browser and device information, access time. These appear in the hosting infrastructure's server logs; in the contact form, your IP address is used only briefly and temporarily to limit abuse and is not stored with your message.

Please do not share special categories of personal data (such as health, religion, political opinion or biometric data) or unnecessary personal information in the message field.

3. Purposes of Processing

• Evaluating and replying to the request you send through the contact form,
• Conducting project and quotation discussions,
• Securing the website and the contact form, preventing spam and abuse,
• Fulfilling legal obligations and protecting our rights in possible disputes.

4. Collection Method and Legal Bases

Your personal data is collected through the contact form on the website and the hosting infrastructure's server logs, by automatic or partly automatic means.

Processing relies on the following legal bases in Article 5(2) of the KVKK:

• It is directly related to establishing a preliminary discussion or contract at your request (Art. 5/2-c),
• Compliance with a legal obligation (Art. 5/2-ç),
• It is necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
• Our legitimate interests, such as site security and spam prevention, provided they do not harm your fundamental rights and freedoms (Art. 5/2-f).

We do not request your explicit consent for this processing. The checkbox in the contact form is not consent; it only confirms that you have read this notice.

5. Transfer of Personal Data

Your personal data is never shared with third parties for advertising or marketing purposes and is never sold. It may be transferred, limited to what is needed to provide the service, to the following service providers:

• Vercel Inc. (USA): hosting and delivery of the website.
• Resend (USA): delivery of your contact form message as an email.
• Google LLC (USA): provider of the email inbox (Gmail) that receives the message.

Because these providers' servers are located abroad, the transfer is considered a transfer abroad. Transfers are limited to the purposes above and are made in line with the conditions in Article 9 of the KVKK.

Information may be shared with legally authorized public authorities upon request, to the extent required by law.

6. Retention Period

Information you send through the contact form is kept for as long as needed to conclude your request and for no more than 2 years from the date of the request. If a contractual relationship is established, the retention periods required by law apply. After this period, your data is deleted, destroyed or anonymized.

7. Cookies and Similar Technologies

This site does not use advertising, analytics or tracking cookies. Your choice in the cookie notice (accept or decline) is stored only in your browser's local storage and is not sent to our servers.

The site contains links to external services such as WhatsApp, LinkedIn and Instagram and to the websites of reference projects. When you click them, the privacy policies of those services apply.

8. Data Security

All traffic on the site is transmitted over an encrypted connection (HTTPS). Only authorized people can access your messages. Despite the technical and organizational measures taken, absolute security of data transmitted over the internet cannot be guaranteed.

9. Your Rights as a Data Subject

Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:

• To learn whether your personal data is processed,
• To request information about it if it has been processed,
• To learn the purpose of processing and whether it is used accordingly,
• To know the third parties to whom it is transferred in Turkey or abroad,
• To request correction if it is incomplete or inaccurate,
• To request deletion or destruction under the conditions in Article 7 of the KVKK,
• To request that corrections and deletions be notified to third parties to whom the data was transferred,
• To object to a result against you arising from analysis of the data exclusively by automated systems,
• To claim compensation for damage caused by unlawful processing.

10. How to Apply

You may send your requests about your rights, together with information identifying you, to agencycolen@gmail.com. We may ask for additional information or documents to verify your identity. Applications are concluded free of charge within 30 days at the latest, depending on the nature of the request; if the process requires a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

If you are not satisfied with the response to your application, you have the right to file a complaint with the Personal Data Protection Authority (kvkk.gov.tr).

11. Updates

This notice may be updated according to changes in legislation or in the site's data processing practices. The current version is always published on this page, and the publication date is shown at the top.