Privacy Notice

1. Who is responsible

This notice explains how tuncsystem.com ("the Site") handles personal data. It is prepared under Turkey's Personal Data Protection Law No. 6698 ("KVKK"); the binding version is the Turkish text on /tr/kvkk.

Data controller: Umut Tunç (TUNCSYSTEM) · Pendik, Istanbul, Türkiye · [email protected]

2. What we process and why

The Site has no user accounts, no advertising, no analytics and no tracking tools. Personal data is processed only in the following cases and for the stated purposes:

• Contact form: your name, e-mail address, message and the page language, plus the IP address and browser information (user agent) at the time of sending, to prevent abuse. Purpose: to answer you, and to stop the form being used for spam or attacks.
• Server logs: every request to the Site records the IP address, date and time, requested address, browser information and response code. Purpose: information security, finding faults and preventing attacks.
• Preferences stored in your browser: your display and behaviour settings and your language and music choices are kept only in your own browser's local storage (localStorage). They are never sent to us, and you can delete them at any time by clearing your browser data.
• Music panel: a track is loaded from YouTube's privacy-enhanced youtube-nocookie.com domain only when you press "Play". From that moment YouTube (Google) may process data under its own privacy policy.
• Tech news from around the web: the outside headlines on the News page are fetched by our server; your browser does not contact any third party for that section. When you open a headline, the destination site's own policy applies.

The Site uses no advertising or analytics cookies. Cloudflare, the provider that protects the Site, may set strictly necessary technical cookies for bot and attack protection.

The Site's public pages do not send visitor data to any AI service. AI (Google Gemini) is used only in features of the site owner's own admin panel.

3. How data is collected and on what legal basis

Data is collected electronically: from you through the contact form, and automatically in the server logs.

Contact form data is processed on the basis of our legitimate interest in answering you (KVKK Art. 5/2(f)) or, where your request concerns entering into a contract, for that purpose (Art. 5/2(c)). Server logs are processed on the basis of our legitimate interest in keeping the Site secure (Art. 5/2(f)).

4. Who receives data

Your data is never sold or shared for marketing. Only the following providers can access it, as processors, and only for the stated purpose:

• Cloudflare, Inc. (USA): all traffic to the Site passes through Cloudflare for security and speed; IP addresses and request details are processed for that purpose.
• Contabo GmbH (Germany): hosting of the server that holds the Site, its database and its logs.
• Resend (USA): forwarding messages from the contact form to the site owner by e-mail.
• Our e-mail provider (Türkiye): sending and storing the replies we send you.

Transfers to providers based abroad are made in line with the procedures and safeguards set out in KVKK Art. 9. Beyond these, data is disclosed only to public authorities legally entitled to request it.

5. How long we keep it

• Contact form messages: up to 2 years after your request has been dealt with.
• Server logs: deleted automatically as they reach their size limit; usually kept for no more than a few weeks.
• Backups: the server's daily backups are deleted automatically after 7 days.

Data past its retention period is deleted, destroyed or anonymised.

6. Your rights

Under Article 11 of the KVKK you may ask the data controller to:

• tell you whether your personal data is processed and, if so, give you information about it;
• tell you the purpose of the processing and whether the data is used accordingly;
• tell you the third parties, in Türkiye or abroad, to whom it has been transferred;
• correct it if it is incomplete or wrong, delete or destroy it under the conditions of KVKK Art. 7, and notify those third parties of this;
• object to an outcome against you that results solely from automated analysis;
• compensate you for damage caused by unlawful processing.

7. How to apply

Send your request by e-mail to [email protected] with enough information for us to verify your identity. We answer within 30 days at the latest, free of charge; should a request involve a separate cost, the fee schedule set by the Personal Data Protection Authority may apply.

This notice is updated whenever the way the Site works changes. The current version is always on this page.