Privacy & Cookie Policy
This document explains how your personal data is collected, processed, protected, and managed on Alexourus.dev (alexourus.com) in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and the European Union General Data Protection Regulation (GDPR).
Manage Your Cookie Preferences
You can review, customize, or revoke your cookie choices at any time.
§ 1.Data Controller Identity
Pursuant to the Turkish Law on the Protection of Personal Data (KVKK No. 6698) and Article 4(7) of the EU General Data Protection Regulation (GDPR), the Data Controller responsible for processing your personal data on the official domain alexourus.com is the software engineering and digital production studio Alexourus.dev.
Company / Studio Name: Alexourus.dev
Official Domain: alexourus.com
Contact & DPO Email: [email protected]
Contact Page: alexourus.com/en/contact
§ 2.Scope & Processing Principles
We adhere strictly to privacy-by-design and data minimization principles. All processing activities comply with the foundational tenets set forth in KVKK Article 4 and GDPR Article 5:
- Lawfulness, fairness, and transparency: Processed transparently and lawfully with clearly stated purposes.
- Purpose limitation: Data is gathered exclusively for specified, legitimate developer communication and technical maintenance.
- Data minimization: Only the bare minimum necessary information is processed.
- Accuracy and storage limitation: Data is retained only as long as required to fulfill stated operations or legal obligations.
- Integrity and confidentiality: Rigorous modern cryptographic measures prevent unauthorized access, tampering, or loss.
§ 3.Categories of Processed Data
Name, surname, email address, message body submitted via the contact form.
Masked IP address, access timestamp, user-agent for platform defense and firewall security.
Active theme ('dark'/'light'), preferred locale ('tr'/'en'), and cookie consent states.
Aggregate page paths and referrer origin without cross-site tracking or advertising fingerprints.
§ 4.Processing Purposes & Legal Grounds
We process personal data only when valid legal grounds exist under KVKK Articles 5 & 6 and GDPR Article 6:
Processing messages, inquiries, consultancy requests, or software project collaboration sent through our contact form.
Detecting automated bot attacks, DDoS mitigation, and preserving website performance.
Executing non-essential cookies such as performance analytics or persistent personalized preferences. Consent may be revoked anytime.
§ 7.Data Transfers & Infrastructure Security
Zero Commercial Sale Guarantee: We never sell, lease, monetize, or commercially license your personal data to any external entity or advertising broker. Data is shared only with technical cloud infrastructure providers (hosting, DNS, and TLS certificates) strictly for the technical operation and defense of the site.
TLS 1.3 / SSL end-to-end transport encryption, Strict Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), rate-limiting middleware against brute-force requests, and strict XSS sanitization.
§ 8.Your Legal Rights Under KVKK & GDPR
KVKK m. 11Rights Under Turkish Law (KVKK No. 6698)
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether data is used accordingly,
- Know third parties to whom data has been transferred domestically or abroad,
- Request rectification of incomplete or inaccurate data,
- Request deletion or destruction of your personal data under KVKK Article 7,
- Object to results occurring to your detriment by solely automated processing,
- Demand compensation for damages suffered due to unlawful data processing.
GDPR Art. 15-22Rights Under EU General Data Protection Regulation
- Right to Access: Obtain confirmation and copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete information.
- Right to Erasure ('Right to be Forgotten'): Request immediate data deletion when retention grounds lapse.
- Right to Restriction of Processing: Limit handling of your data under dispute.
- Right to Data Portability: Receive your personal data in structured, machine-readable format.
- Right to Object: Object to processing founded on legitimate interest grounds.
- Right to Withdraw Consent: Revoke previous consents at any time without retroactive penalty.
- Right to Lodge a Complaint: Lodge a complaint with your competent data protection supervisory authority.
§ 9.Retention & Erasure Timeline
We preserve personal data only for the time necessary to achieve processing purposes or satisfy legal statutory limitations:
- Contact Submissions: Retained for up to 1 year following resolution of inquiry.
- Security & Access Logs: Maintained for a maximum of 90 to 180 days for intrusion detection.
- Cookie Consents: Held for 12 months or until cleared by user in browser storage.
§ 10.How to Exercise Your Rights & Contact
To submit an inquiry, request data access, or exercise any of your rights under KVKK or GDPR, you may transmit your signed request to our dedicated mailbox. In accordance with KVKK Article 13 and GDPR Article 12, your application will be concluded free of charge as soon as possible and within 30 days at the latest.
[email protected]
Dedicated Data Privacy Inquiries — Alexourus.dev