Privacy Notice
Last updated: 10.11.2026 · Version 2026.11
1. Data controller
Under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is Okan Taş, Serbest Muhasebeci Mali Müşavir. Our full identity and contact details are on the Legal information page.
2. What we process, why, and on what legal basis
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, e-mail, phone, message; technically IP address | Replying to your request | KVKK art. 5/2-c and 5/2-f | Message 2 years; IP 6 months |
| Newsletter (double opt-in) | E-mail address, language, subscription and confirmation dates with the IP address truncated (last part removed) at those moments, consent text and version, source form, delivery logs | Sending e-mails about payroll and social security changes and new articles; proof of consent | Explicit consent (KVKK art. 5/1) and commercial message consent (Law 6563 art. 6) | Until you withdraw consent; withdrawal record 3 years; unconfirmed sign-ups 7 days |
| Security logs | IP address, browser data, login attempts, error logs | Information security, abuse prevention | KVKK art. 5/2-f (legitimate interest) | 90 days – 1 year (see table below) |
| Cookie consent record | Your choice (categories), consent text version, time, a random ID, truncated IP address — no name or contact data | Proving that consent was given or withdrawn | KVKK art. 5/2-ç and 5/2-e | See retention table below |
| Görüşme talebi | Name, e-mail, phone, additional details asked on the form and message; technically IP address and browser data | Answering your request and contacting you | KVKK art. 5/2-c (pre-contractual steps at your request) and 5/2-f (legitimate interest) | Request 2 years; IP/browser 6 months |
| İş başvurusu | Name, e-mail, phone, additional details asked on the form and message; technically IP address and browser data | Answering your request and contacting you | KVKK art. 5/2-c (pre-contractual steps at your request) and 5/2-f (legitimate interest) | Request 2 years; IP/browser 6 months |
3. How we collect data
Your data is collected electronically from you through forms on the site, and automatically through server logs and (only with your consent) cookies.
4. Recipients
| Recipient | Country | Purpose |
|---|---|---|
| Google LLC (Maps) | USA | Showing the map on the site; only with your permission |
| Competent public authorities | Türkiye | Legal obligations and official requests |
The servers of the following service providers are located abroad, so your data is transferred abroad: Google LLC (Maps, USA). Transfers abroad are made under Article 9 of the KVKK: where there is no adequacy decision for the destination country, one of the appropriate safeguards in art. 9/4 (such as the standard contract announced by the Board, notified to the Authority within 5 business days of signature) is provided; failing these, a transfer may only take place in the incidental cases listed in art. 9/6. This notice will be updated once the safeguard process is completed. The transfer for the map takes place only if you allow the map to be shown; otherwise the map is not loaded and no data is sent to Google.
5. Retention periods
The periods below are enforced automatically by the site software.
| Record | Period |
|---|---|
| Login attempts | deleted after 3 months |
| Administrator activity logs | deleted after 1 year |
| Not-found page logs | deleted after 6 months |
| IP/browser data in contact messages | cleared after 6 months |
| Contact messages, call-back and quote requests | deleted after 2 years |
| Cookie consent records | deleted after 2 years |
| E-mail delivery logs | deleted after 1 year |
| Newsletter delivery records | deleted after 1 year |
| Raw visit statistics records | deleted after 3 months |
6. Special categories of personal data
The meeting request and job application forms ask only for contact details and a short note; they do not ask for ID numbers, employee lists, payroll records, bank details or health data. Please do not send employee documents through the forms. Amounts typed into the calculator are computed in your browser and are not stored. Client information is kept confidential under the professional code of ethics.
7. Your rights and how to apply
Under Article 11 of the KVKK you have the right to: (a) learn whether your personal data is processed; (b) request information if it has been processed; (c) learn the purpose of processing and whether it is used accordingly; (ç) know the third parties to whom it is transferred in Türkiye or abroad; (d) request correction of incomplete or inaccurate data; (e) request erasure or destruction under Article 7; (f) request that (d) and (e) be notified to third parties to whom the data was transferred; (g) object to a result against you arising exclusively from automated analysis; (ğ) claim compensation for damage due to unlawful processing.
You may apply in writing (wet-signed letter to the address on our Legal information page), via registered e-mail (KEP), with a secure electronic or mobile signature, or from an e-mail address previously registered with us to kvkk@okantas.example. We reply free of charge within 30 days at the latest (KVKK art. 13). If your application is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application (KVKK art. 14). Visitors from the EU also have the rights under GDPR art. 15–22.