Scope and data controller
This notice informs people who visit the Murat Demircan portfolio site and send a project request. The data controller and contact details for requests are shown at the top of this page.
Information processed and how it is collected
The name, email address, selected service and message you enter in the project form are received electronically. The page the form was sent from, the time the request was created and updated, and its status, are also recorded. Please do not include health information, identity documents, passwords or personal details not needed for the project.
To limit abuse, your IP address is held briefly as an irreversible hash; the address itself is not stored as a form record. The infrastructure serving the site may process your IP address, request time, browser and technical request details as part of connection and error logs.
Purposes and legal grounds
Your name, contact details and project description are processed to evaluate your request, clarify the scope, prepare a quote and reply to you. For requests aimed at entering into a contract, the legal basis is Article 5/2(c) of Turkish Law No. 6698 (KVKK). Answering general questions and preventing abuse are based on legitimate interest under Article 5/2(f), provided this does not harm your fundamental rights.
Keeping necessary records in case of a dispute is assessed under Article 5/2(e), and responding to lawful requests from competent authorities under Article 5/2(ç) as an applicable legal obligation. Submitting the form does not mean subscribing to marketing or giving general explicit consent.
Who has access to the data?
Project requests are accessed by Murat Demircan, who runs the site. Infrastructure providers are used for hosting and file delivery. The font is loaded from Google Fonts. These providers may process technical data in order to provide the service. Because form messages are forwarded by email and we may correspond by email, email providers are also involved in delivering messages. Where legally required, necessary information may be provided to competent authorities.
Infrastructure abroad
The site uses international hosting and content delivery services, so data may be processed outside Türkiye. You can request information about the providers used, processing locations and transfer arrangements via the contact address below. This notice alone does not constitute explicit consent or a legal safeguard for transfers abroad.
Retention and deletion
Form messages are not stored on the site; they are forwarded by email. These emails are kept in Murat Demircan’s email account and can be deleted; there is no scheduled automatic deletion. The need to retain records is assessed considering the status of the request, any contractual relationship, applicable legal periods and the need to protect a right. Records whose processing purpose has ended and which no longer need to be kept should be deleted. You can use the contact channel on this page for deletion requests.
Your rights and how to apply
You can find out whether your data is processed, for what purpose and to whom it has been transferred; request correction of incomplete or inaccurate data, its deletion or destruction where the conditions are met, and notification of these actions to recipients. You can object to a result against you arising solely from automated analysis, and request compensation for damage caused by unlawful processing.
You can send your request from the email address you previously shared with us to the email address on this page, stating your name and request. Your right to use the other application methods set out in the law is reserved. Only the additional information necessary to verify your identity may be requested. Requests are answered as soon as possible depending on their nature, and within 30 days at the latest. The process is free of charge as a rule; if additional costs arise, the Board’s tariff may apply.