Privacy Policy & KVKK / GDPR Notice
Last Updated: October 2026 · geofurkan.com
1. Data Controller
This information notice is prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR). The data controller for personal data processed through geofurkan.com is Furkan Davut DEMİR.
Contact / Inquiries: info.geofurkan@gmail.com
2. Personal Data Processed & Collection Methods
We collect and process minimal personal data necessary to provide a functional and secure personal portfolio experience:
- Contact Form Data: Your name, email address, message subject, and content when you submit an inquiry through our contact form.
- Technical & Network Security Data: IP address (anonymized/processed for rate limiting and defense against automated spam), request timestamps, browser headers.
- Usage & Analytics Data: If you consent to analytics cookies, aggregated and anonymized page view statistics collected via Google Analytics 4.
3. Legal Grounds & Purposes of Processing
Your data is processed based on legitimate interest (KVKK Art. 5/2-f, GDPR Art. 6/1-f) to maintain network security, contractual necessity/consent (KVKK Art. 5/2-c, GDPR Art. 6/1-b) to respond to your professional inquiries, and explicit consent for non-essential analytics.
4. Cross-Border Data Transfers
Our infrastructure utilizes global services for reliability. Specifically, contact emails may be delivered via Resend API (USA), website hosting is provided via Google Cloud / Firebase (global servers), and web traffic metrics are processed by Google Analytics (USA/EU). By submitting the contact form and accepting analytics, you acknowledge and consent to this cross-border transmission under KVKK Art. 9 and GDPR Chapter V.
5. Data Retention & Security
Inquiry messages are retained only as long as necessary to fulfill professional communication and legal obligations, after which they are securely deleted. IP rate limiting logs are held in memory for no longer than 15 minutes. Industry-standard TLS/SSL encryption, Content Security Policies, and strict input validation protect data against unauthorized access.
6. Your Rights Under KVKK & GDPR
As a data subject, you have the right to learn whether your data is being processed, request access to or a copy of your data, request rectification of inaccurate data, request erasure ("right to be forgotten"), and object to processing.
To exercise these rights, please contact us with proof of identity via: