Privacy Notice

Last updated: October 5, 2026

This Privacy Notice explains how Recep Emre Erçetin (“I”, “me”, or “the site operator”) handles personal data in connection with recepemreercetin.com (the “Site”). It is intended for visitors, subscribers, account holders, people who contact me, users of free digital resources, and others who interact with the Site.

For Site activities in which I determine why and how personal data is processed, I act as the data controller or equivalent responsible party under applicable privacy law.

Contact: [email protected]

This global notice is separate from Turkish-language notices maintained for processing governed specifically by Türkiye’s Personal Data Protection Law (KVKK). Where mandatory local law applies, those mandatory rules prevail.

1. Personal data I may collect

Depending on the feature you use, I may process:

• Identity and contact data, such as your name, surname, email address and, where you choose to provide it or it is necessary for the request, telephone number.
• Communication data, including messages, enquiries, support requests, attachments and correspondence.
• Account data, where account functionality is enabled, such as account identifiers, login-related information and settings. Passwords should be handled in protected form by the relevant authentication system and are not intended to be visible to me in plain text.
• Comment data, if comments are enabled, including the content you submit and technical information used for moderation and abuse prevention.
• Download and transaction-related data, where WooCommerce or another delivery function is used for free digital resources, such as the selected item, delivery status and technical records necessary to provide the download. Paid sales are not currently offered through the Site.
• Device, log and security data, such as IP address, browser type, device information, timestamps, request logs, security events and similar technical data.
• Cookie and similar technology data, depending on your choices and on which technologies are enabled. See the Cookie Policy for details.
• Marketing preference data, such as whether you subscribed to a newsletter, withdrew consent or opted out.
• Other information you voluntarily provide when using a form or communicating with me.

Please do not send sensitive or special-category information unless it is genuinely necessary for your request and you have a lawful basis to provide it.

2. How personal data is collected

Personal data may be collected:

• directly from you when you submit a form, subscribe, create an account, comment, request support or contact me;
• automatically through hosting, security, logging, cookies and similar technologies;
• from service providers that support Site operation, security, analytics, communications or digital-resource delivery;
• from publicly available or professional sources where reasonably necessary for legitimate professional correspondence and permitted by law.

3. Purposes and legal bases

I may process personal data for the following purposes, subject to the legal basis required in your jurisdiction:

Where I rely on legitimate interests, I consider whether the processing is necessary and whether your interests or fundamental rights override those interests.

Where I rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal.

4. Cookies, analytics, advertising and similar technologies

The Site may use cookies, pixels, tags, local storage, embedded technologies or comparable tools. Their legal treatment depends on purpose, configuration and jurisdiction.

For visitors covered by UK rules, non-exempt storage or access technologies are not intended to be activated before valid consent. Certain narrowly defined technologies may be used without consent where a current PECR exception applies, including strictly necessary uses and, subject to all statutory conditions, certain statistical or appearance/functionality uses. Where an exception requires a simple and free way to object, such a mechanism should be provided.

Advertising, remarketing, cross-service tracking and other non-exempt uses require consent where UK PECR applies.

More detail is available in the Cookie Policy and in the Site’s cookie-preference controls where available.

5. Service providers and recipients

Personal data may be disclosed to service providers only to the extent reasonably necessary for Site operation or the relevant purpose. Current infrastructure may include:

• Cloudflare for content delivery, performance and security;
• Natro for hosting or related infrastructure in Türkiye;
• Firebase services configured in the European region where applicable;
• Amazon Web Services (AWS) services, including infrastructure that may involve processing in the United States;
• MailPoet for newsletter and email-management functionality;
• analytics, tag-management, advertising, embedded-media or security providers that are enabled on the Site and disclosed through the relevant privacy or cookie controls.

Providers may act as processors/service providers or, for some functions, as independent controllers depending on their role and terms.

I may also disclose information where reasonably necessary to comply with law, protect rights or security, investigate abuse, respond to lawful requests, or establish, exercise or defend legal claims.

I do not sell personal data for money.

Some advertising or analytics activities can be treated as “sale”, “sharing” or targeted advertising under certain U.S. state privacy laws even when no money changes hands. Where such a law applies to the Site, any corresponding statutory opt-out right will be respected through an available rights mechanism or privacy control.

6. Artificial intelligence services

Personal data submitted by users through Site forms, accounts, support channels, comments or similar Site functions is not intentionally sent to external artificial-intelligence services for model training, prompt processing or profiling as part of ordinary Site operation.

This statement concerns user personal data. It does not change the separate intellectual-property rules governing whether publicly accessible Site content may be scraped, copied, used to create datasets, or used for AI model training or fine-tuning. Those matters are addressed in the Content, Copyright and Intellectual Property Policy.

7. International data transfers

The Site is operated from Türkiye and uses service providers or infrastructure that may process information in Türkiye, the European Economic Area and the United States, as well as other locations used by a provider’s lawful global infrastructure.

Where UK GDPR or another transfer-restriction regime applies, restricted transfers are intended to rely on an available lawful mechanism, such as an adequacy regulation, an approved contractual safeguard (including the UK International Data Transfer Agreement or an applicable UK Addendum), or another lawful exception where its conditions are met. Additional technical or organisational safeguards may be used where appropriate.

You may contact [email protected] for more information about the transfer mechanism relevant to your data where applicable.

8. Retention

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, including any period needed for security, dispute resolution, legal claims, accounting or other legal obligations.

Retention depends on the category of information and context. For example:

• enquiries and support correspondence may be retained while the matter is active and for a reasonable period afterwards;
• newsletter data may be retained until you unsubscribe or the list is otherwise cleaned, while suppression records may be kept to respect an opt-out;
• account and download records may be kept while needed to provide the feature and for security or legal purposes;
• security and technical logs are generally kept for a limited period appropriate to the security or operational purpose;
• consent and privacy-choice records may be retained as evidence of the choice and to honour it.

Data may be deleted, anonymised or securely disposed of when it is no longer required.

9. Your privacy rights

Depending on where you are located and which law applies, you may have rights including:

• to be informed about processing;
• to access personal data;
• to correct inaccurate or incomplete personal data;
• to request deletion or erasure in qualifying circumstances;
• to request restriction of processing;
• to object to certain processing, including direct marketing;
• to receive certain data in a portable format;
• to withdraw consent;
• to object to or obtain safeguards concerning certain automated decisions where applicable;
• under certain U.S. state laws, to opt out of sale, sharing, targeted advertising or qualifying profiling, and to appeal certain rights-request decisions.

These rights are not absolute. Their availability and scope depend on the applicable law, the processing purpose and any statutory exemption.

Additional U.S. state privacy rights

U.S. privacy law is state-specific and does not apply to every website in the same way. Where a U.S. state privacy law applies to the Site because its territorial, business, processing-volume or other statutory conditions are met, residents may have additional rights such as:

• confirmation of whether personal data is being processed and access to that data;
• correction of inaccurate personal data;
• deletion of qualifying personal data;
• receipt of certain personal data in a portable format;
• opting out of the sale of personal data, the sharing of personal information for cross-context behavioural advertising, targeted advertising, or qualifying profiling, depending on the law;
• limiting certain uses or disclosures of sensitive personal information where a law provides that right;
• using an authorised agent where permitted;
• appealing certain decisions on a privacy-rights request where the applicable state law provides an appeal process; and
• freedom from unlawful discrimination or retaliation for exercising a privacy right.

I do not sell personal data for money. However, some U.S. state laws define “sale,” “sharing,” or “targeted advertising” broadly enough that particular advertising, analytics or cross-service data disclosures can fall within those concepts even when no payment is received. If such processing is enabled and an applicable law requires an opt-out, the corresponding choice will be respected.

Where applicable law requires recognition of a browser- or device-based universal opt-out mechanism, including Global Privacy Control (GPC) or another legally recognised opt-out preference signal, a valid signal will be treated as an opt-out request for the purposes and scope required by that law. Such a signal is not treated as blanket consent to any other processing.

For California residents, if the CCPA applies to the Site, this notice is intended to work together with any required notice at collection and to explain the categories and purposes of personal-information processing described above. California rights may include the rights to know/access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment, subject to statutory conditions and exceptions.

To make a request, email [email protected] or use the downloadable Data Subject Rights Request Form. I may ask for information reasonably necessary to verify your identity or authority before acting on a request. I will not ask for more verification data than reasonably necessary.

If UK data protection law applies, you may also have the right to complain to the UK Information Commissioner’s Office. Other jurisdictions may provide a right to complain to the relevant privacy or data-protection authority.

10. Automated decision-making

The Site is not intended to make decisions producing legal or similarly significant effects about users solely through automated processing as part of ordinary Site operation.

If that changes, this notice will be updated and any rights or safeguards required by applicable law will be provided.

11. Security

Reasonable technical and organisational measures are used to reduce risks such as unauthorised access, alteration, loss, misuse or disclosure. No internet service can be guaranteed completely secure, and users should also take appropriate steps to protect their own devices, accounts and credentials.

See the User Security Policy for more information.

12. Children’s privacy

The Site is not designed or directed as a service for children. In particular, it is not directed to children under 13 in the United States, and I do not knowingly solicit personal data from children in circumstances that would require verifiable parental consent under the U.S. Children’s Online Privacy Protection Act (COPPA) or comparable protection under other applicable law.

If you believe a child has provided personal data through the Site inappropriately, contact [email protected] so the situation can be reviewed and appropriate action taken.

13. Third-party websites and embedded services

The Site may link to or embed third-party services. Their privacy practices are governed by their own notices and terms. I do not control third-party websites merely because the Site links to them.

14. Changes to this notice

This notice may be updated when Site features, providers, legal requirements or processing practices change. The “Last updated” date will be revised when a material update is published.

15. Contact

For privacy questions or rights requests:

Recep Emre Erçetin
Email: [email protected]
Website: recepemreercetin.com