Personal Data Notice
Information on personal data processed through andacguven.com under Article 10 of Turkey’s Personal Data Protection Law No. 6698.
Updated 26 September 2026
This Notice has been prepared under Turkey’s Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform you about the personal data processed through andacguven.com (the “Site”).
1. Data controller
Your personal data is processed by Andaç Güven as data controller (the “Data Controller”). Contact: guvenandac@gmail.com.
2. Categories of personal data
| Category | Data |
|---|---|
| Identity and contact | Name, email address |
| Customer transaction | Requests and message content, requested digital content, waitlist sign-up |
| Marketing | Message preferences, consent and refusal records, digital content download records |
| Transaction security | One-way hashes of the IP address and browser details, server logs |
| Usage | Page views, device and approximate location through Google Analytics, if you allow it |
3. Purposes and legal grounds
| Purpose | Legal ground (Law, Art. 5) |
|---|---|
| Sending you the digital content (lead magnet) you requested, registering you on a waitlist and sending the updates you asked for | Directly related to the conclusion or performance of a contract (Art. 5/2-c) |
| Sending newsletters, announcements, campaigns and other commercial electronic messages by email | Explicit consent (Art. 5/1) and approval under Law No. 6563 |
| Sharing your email address with business partners and the Data Controller’s projects | Explicit consent (Art. 5/1, Art. 8/1) |
| Answering messages you send | Legitimate interest of the data controller, provided your fundamental rights are not harmed (Art. 5/2-f) |
| Keeping the Site secure, preventing spam and abuse, proving consent records | Legal obligation (Art. 5/2-ç) and legitimate interest (Art. 5/2-f) |
| Measuring use of the Site statistically | Explicit consent (Art. 5/1), through your cookie preferences |
4. Transfers of personal data
Your personal data may be transferred, limited to the purposes above and in line with Articles 8 and 9 of the Law, to the following recipients:
- Service providers: suppliers of hosting, email delivery, newsletter management, form and analytics services (e.g. Hostinger, Beehiiv, MailerLite, Brevo, Mailchimp, Amazon Web Services, Google).
- Business partners: where you have given explicit consent, third-party companies with which the Data Controller carries out marketing and collaboration; they may send you commercial electronic messages about their own products and services.
- The Data Controller’s projects: where you have given explicit consent, projects and companies owned or run by the Data Controller (including Webside, pazarlamax.tr, yzrehberi.tr, seorankup.ai, uidesign.best, Freelancerland and projects launched in the future).
- Authorised public bodies: to meet legal obligations and upon request.
Some service providers have servers outside Turkey. Transfers abroad are made under the conditions of Article 9 of the Law (appropriate safeguards, standard contracts or, in exceptional cases where these are not available, explicit consent).
5. How data is collected
Your personal data is collected electronically, partly or fully by automated means, through the waitlist, digital content and contact forms on the Site, newsletter subscription links, email correspondence and cookies.
6. Retention periods
- Waitlist records: one year from the launch announcement of the related project, or until you ask for them to be deleted.
- Data under consent to commercial electronic messages: until you withdraw consent; consent and refusal records are kept for three years after the consent ceases to be valid, as required by law.
- Correspondence: for a reasonable period after the relationship ends and for statutory limitation periods.
- Analytics data: fourteen months in Google Analytics.
Data whose retention period has ended is deleted, destroyed or anonymised.
7. Your rights
Under Article 11 of the Law you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Turkey or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction under Article 7; to request that these actions be notified to the third parties to whom it was transferred; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
You can send requests, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, from the email address registered with the Data Controller to guvenandac@gmail.com. Requests are concluded free of charge within thirty days at the latest.
You may withdraw your explicit consent at any time; withdrawal does not affect the lawfulness of processing before it. You can also refuse commercial electronic messages with the unsubscribe link in each message.