PERSONAL DATA PROTECTION
Privacy Notice
This notice explains how personal data may be processed through bahribudak.com and for which purposes.
Last updated: 3 September 2026
1. Data controller
The data controller for this website is Bahri Budak, who operates the freelance technical publishing and consulting activity.
Contact: bahribudak@gmail.com
2. Personal data that may be processed
- Name and email submitted through the contact form.
- Optional company, role/title and reference link.
- The subject, process area, description and message of a technical request.
- Limited technical data for security and abuse prevention, such as request time, browser information and a technical identifier derived from the IP address.
- If account or administration areas are used, the authentication data required for those areas to operate.
Membership or a personal profile is not required to download technical publications, and no person-linked download history is created. Minimum technical data needed to enforce the daily download limit may be processed for a limited period.
3. Purposes of processing
- To receive, assess and respond to technical requests.
- To define the scope and appropriate form of work.
- To maintain site security, prevent abuse and enforce the daily download limit.
- To operate authentication, administration and technical processes.
- To comply with legal obligations and respond to competent authority requests.
4. Legal grounds
Data may be processed on legal grounds provided by the Turkish data protection law, including the necessity of assessing a request and communicating with the requester, compliance with legal obligations, legitimate interests in maintaining site and information security, or explicit consent where separately provided. Where explicit consent is required, it is requested separately from this notice and for a specific purpose.
5. Possible recipients
Where necessary for operating the service and maintaining security, data may be processed by hosting and delivery providers (Vercel), database and authentication providers (Supabase), abuse-prevention and rate-limiting providers (Upstash), and the contact-form notification provider (Formspree). Data may be shared with competent public authorities or legally authorized persons only to the extent permitted by law.
Some of these providers may be located outside Türkiye. International transfers are carried out in accordance with the applicable provisions of Turkish data protection law, taking into account the current service configuration and contractual terms.
6. Collection method and retention
Data may be collected electronically through contact forms, account/administration sign-ins and technical records required for the website to operate.
Data is retained for the period required by the purpose, applicable legal retention periods and any reasonably necessary dispute period. Security and rate-limiting data is deleted, anonymized or made inaccessible when it is no longer needed for its purpose.
7. Your rights
Under Article 11 of the Turkish data protection law, you may have the right to learn whether your personal data is processed, request information about it, learn the purposes and recipients, request correction, deletion or destruction where applicable, request restriction, claim compensation for unlawful processing, and object to relevant processing activities.
To exercise your rights, contact bahribudak@gmail.com with a clearly stated request.
This page is a general notice prepared with reference to the website’s current technical operation. It will be updated if service providers, data flows or website features change.
Go to contact page →