Legal

Privacy Policy

This policy explains how personal data is handled on the public website at tuncayasma.com. It is written to address both Türkiye’s KVKK and, where applicable, the GDPR.

Last updated: 2 October 2026

1. Data controller

The data controller is Tuncay ASMA, acting as an individual. Privacy questions and requests may be sent to tuncayasma@gmail.com.

2. Data this site handles

• Basic server records: requested path, time, browser/user-agent information, referrer and network information such as an IP address may be processed in standard web-server and reverse-proxy logs.
• Cookie-free audience measurement: the self-hosted Umami service records aggregated page and referral events. It is configured without cookies, with “do not track” support, and does not retain visitor IP addresses.
• Optional Google Analytics: Google Analytics is loaded only after you choose “Accept” in the preference banner. It may process device, page, referral and approximate location information under Google’s own terms. Google states that Google Analytics does not log or store IP addresses; IP masking is therefore not necessary in GA4.
• Browser-only preferences: cookie choice, debate playback preferences, the current debate state, visit count in this browser and saved “common ground” entries are stored in localStorage. These values stay in your browser and are not submitted to this site.
• Messages you initiate: if you contact Tuncay ASMA by email, the message, address and any information you include are processed to reply. The WhatsApp link opens WhatsApp/Meta with a pre-filled message; sending it is your choice and is governed by that provider’s terms.

This public site has no account registration, file upload, payment flow or server-side contact form.

3. Purposes and legal grounds

Data is used to deliver and secure the site, diagnose faults, understand aggregated usage, remember your settings and answer messages. Under KVKK, processing relies as applicable on explicit consent, the establishment or performance of a relationship you request, legal obligations, and the controller’s legitimate interests without harming fundamental rights. Under the GDPR, the corresponding bases are consent, steps requested before a contract or performance of a contract, legal obligation, and legitimate interests.

4. Cookies and local storage

Umami does not require consent cookies. Optional Google Analytics is disabled until consent. Essential local storage keeps your preference and interactive debate state. You can reopen Cookie preferences at any time. Clearing site data in your browser also removes these local values.

5. Sharing and international transfers

Infrastructure providers may process limited technical data to host and protect the service. If you consent to Google Analytics, information may be processed by Google and transferred outside Türkiye or the EEA under the safeguards described by Google. Opening external project, WhatsApp or email links sends you to independent services; their privacy notices apply after you leave this site. Personal data is not sold.

6. Retention and security

Technical logs and correspondence are kept only as long as reasonably necessary for security, troubleshooting, responding to the message and applicable legal obligations. Aggregated analytics may be retained for trend analysis. Browser-only values remain until you clear them or the application replaces them. Reasonable technical and organisational measures are used, but no internet transmission can be guaranteed completely secure.

7. Your rights

Under KVKK Article 11, you may ask whether your data is processed; request information about processing; learn its purpose and whether it is used accordingly; learn the recipients in Türkiye or abroad; request correction, deletion or destruction where conditions apply; request notice of those actions to recipients; object to a result produced exclusively by automated analysis; and seek compensation for unlawful processing.

Where the GDPR applies, you may also have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a competent supervisory authority. Withdrawing consent does not affect prior lawful processing.

8. Requests and changes

Send requests to tuncayasma@gmail.com. Enough information may be requested to verify identity and locate the relevant data. This notice may change when the site or legal requirements change; the date above will be updated.