Your personal data, kept safe

1. Data controller

Personal data is processed by Begüm Aktaş as the data controller under the KVKK, for the purpose of operating the Sana İyi Gelsin website (sanaiyigelsin.com.tr).

• Data controller: Begüm Aktaş
• Email: sanaiyigelsiniletisim@gmail.com
• In-site contact: after signing in, My Account › My Messages

2. What data do we process?

You can browse the site without being a member. If you sign up and use the community features, the following information is processed:

We do not ask for special categories of personal data (health, religion, political opinion, etc.). Please do not include this kind of information in your posts; our community rules already do not allow discussions of politics and religion.

3. Purposes and legal bases

• Creating and managing your membership account (signing in, password reset, syncing your favorites and history across devices): KVKK Art. 5/2-c, processing is directly related to the establishment or performance of a contract.
• Operating the community area (publishing your posts and replies, delivering and answering your messages to the administrator): KVKK Art. 5/2-c.
• Ensuring security and preventing abuse (approval of new members, review of notifications, blocking, showing your online status to the administrator): KVKK Art. 5/2-f, the legitimate interest of the data controller, provided that your fundamental rights and freedoms are not harmed.
• Fulfilling legal obligations (requests from competent authorities, records under Law No. 5651): KVKK Art. 5/2-ç.
• Improving the site (seeing which pages and lists are popular, using anonymous, aggregated counts): KVKK Art. 5/2-f, legitimate interest.

We do not use your data for advertising, profiling, or sales, and we do not give it to third parties for marketing purposes.

4. Who receives it, and where does it go?

To keep the site running, we use the service providers below. Because these providers' servers are located outside Turkey, your data is transferred abroad. This transfer is carried out in accordance with the conditions set out in Article 9 of the KVKK.

• Google Firebase (Google LLC / Google Ireland Ltd.): membership and sign-in (Authentication) and the database (Cloud Firestore). The database is kept on servers in Europe (the eur3 region).
• Vercel Inc.: hosting and delivery of the site; technical access logs of visits. In addition, anonymous visit statistics (which pages are opened, referring site, country, device and browser type) are kept through Vercel Web Analytics. This measurement does not use cookies, does not create an identifier that identifies you, and makes visits impossible to tell apart from one another at the end of the day.

Information is given to legally authorized public bodies and institutions only when there is a legal request, and only within the scope of that request.

Links such as "Trailer" and "Listen" in our movie, song, book, and painting recommendations take you to sites such as YouTube, Spotify, Wikipedia, and Google Arts & Culture. Those sites are governed by their own privacy policies; we do not send those sites any information about you.

5. How long do we keep it?

• Account information, favorites, and history: for as long as your account stays open. You can delete your account yourself at any time with My Account › Delete my account; your membership information, favorites, history, posts and replies, and messages are then permanently deleted.
• Posts and replies: until you or the administrator delete them. You can remove content that is awaiting approval or has not been published at any time.
• Messages and notifications: until the matter is concluded and the administrator deletes them.
• Online status: only your last seen time is kept, and it is overwritten on every visit; it is deleted when you sign out.
• Technical logs: for the retention periods of the service providers themselves.

Data whose retention period has expired or whose purpose of processing no longer exists is deleted, destroyed, or anonymized.

6. Information stored in your browser

We do not use cookies for advertising or tracking. Only the information needed for the site to work is kept in your browser's local storage:

• Your theme preference (Light / Dark / Auto),
• If you use the site without signing in, your favorites and history (these stay only on that device),
• The session information kept by Firebase so that you stay signed in after you sign in.

You can delete this information at any time from your browser's settings; in that case your preferences are reset and you will need to sign in again.

7. Community area and visibility

• Your posts and replies are visible to members together with your nickname. Visitors who are not members can only see the latest three posts and posts whose link has been shared with them; they cannot see replies. Your first name, last name, date of birth, and email are not shown to other members.
• New members' first posts and posts that touch on politics or religion are reviewed by the administrator before they are published.
• The administrator can see the member list, last seen times, notifications, and messages sent to them only in order to manage the site and ensure security.
• We recommend that you do not write personal information (phone number, address, information about other people, etc.) in your posts.

8. Your rights and how to apply

Under Article 11 of the KVKK, by applying to the data controller you have the right to:

• learn whether your personal data is being processed,
• request information if it has been processed,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• know the third parties to whom your data is transferred, in Turkey or abroad,
• request correction if the data is incomplete or inaccurate,
• request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK,
• request that corrections and deletions be notified to the third parties to whom the data has been transferred,
• object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• request compensation for the damage you suffer because of unlawful processing.

How can you apply?

You can send your request by email to sanaiyigelsiniletisim@gmail.com, or after signing in, through My Account › My Messages. It is enough to state clearly your first name, last name, nickname, contact information, and your request. We may ask for additional information to verify your identity. Applications are concluded free of charge within 30 days at the latest. If you find the response inadequate, you can file a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) (kvkk.gov.tr).

9. Changes to this notice

We may update this notice when a new feature or service provider is added to the site. The current version is always published on this page; the last updated date appears at the top of the page.