Privacy notice

https://nergisabilova.me · 2026-09-15

This notice informs visitors to this profile website and people who contact its operator in accordance with Article 10 of Turkish Personal Data Protection Law No. 6698.

1. Data controller

2. What data is processed, how and why?

The contact form collects your name, email address and message. When you select “Send message”, this information is transmitted over encrypted HTTPS to the GoDaddy hosting service at forms.nergisabilova.me and emailed to contact@nergisabilova.me. Drafts are not stored permanently in your browser; the form server does not store message contents in a separate database.

When you submit the form or an email, your name, email address, message and correspondence details are collected electronically to answer your enquiry and manage business relationships. For enquiries directly connected with entering into or performing a contract, Article 5(2)(c) of the Law applies. Other business correspondence relies on legitimate interests, provided your fundamental rights and freedoms are not harmed (5/2-f). Where necessary, legal obligations and the protection of rights also apply (5/2-ç and 5/2-e). Do not send unnecessary sensitive personal information.

To deliver the website and maintain connection security, the hosting infrastructure may process technical data such as your IP address, request time, browser and connection information. The purpose is the operation and security of the website. The legal basis is the legitimate interest in providing a secure service, taking your rights into account (5/2-f).

3. Recipients and services abroad

Contact messages are processed by the controller and the email infrastructure required for the service. The website is hosted on OpenAI Sites and uses Cloudflare infrastructure. Form transmission uses GoDaddy hosting; email delivery uses GoDaddy/Titan. To limit abuse, a keyed hash of the IP address, a request counter and short-lived request tokens are retained; expired entries are cleared on the next submission. These measures rely on the legitimate interest in a secure service. Where legally required, necessary data may be shared with competent public authorities.

Hosting and email services may use infrastructure outside Turkey. International transfers must satisfy the conditions in Article 9 of the Law. This notice alone does not constitute permission to transfer data or explicit consent. You may contact the controller for information about the services used and the transfer arrangements.

4. Retention and deletion

Correspondence is kept for the period necessary to handle the enquiry and business relationship. Where applicable legal obligations or the protection of a right require retention, the relevant period applies. When the reason for processing ceases, personal data is deleted, destroyed or anonymised.

5. Language preference and links

Your selected language is stored in your browser’s local storage under “nergis-language” so it can be used on your next visit. You can delete these entries in your browser settings. No analytics or advertising tracking code has been added to the website. Fonts are served with the site. External websites have their own data processing terms. The policy of the shop at https://nergisabilova.com is separate from this profile website.

6. Your rights and requests

Under Article 11 of the Law, you have the right to learn whether your personal data is processed and, if so, request information about it; learn the purpose of processing and whether the data is used accordingly; know recipients in Turkey and abroad; request correction of incomplete or inaccurate data; request deletion or destruction when the legal conditions are met and notification of these actions to recipients; object to a result against you arising solely from automated analysis; and request compensation for damage caused by unlawful processing.

You can submit requests in writing to the postal address above. For contact and questions about the request procedure, email contact@nergisabilova.me. Verification of your identity and compliance with the statutory application requirements may be necessary. Requests are answered as soon as possible according to their nature, and within 30 days at the latest. Fees permitted by law remain possible.

Law No. 6698 — Turkish Personal Data Protection Authority