This is the privacy policy and information notice required by Article 10 of Turkish Personal Data Protection Law No. 6698 (KVKK). Because the site is hosted on a server in Europe and is also visited from Europe, GDPR information for visitors in the EU/EEA is provided separately in section 12.
When you submit the form, your name, e-mail address and message are sent to us by e-mail and used solely to review and answer your enquiry. Legal basis: Art. 5/2-(c) KVKK (directly related to the conclusion or performance of a contract) and Art. 5/2-(f) KVKK (legitimate interest of the controller).
Your e-mail address is processed on the basis of your explicit consent (Art. 5/1 KVKK) in order to send you news about new tracks and shows. Signing up uses double opt-in: after entering your address you receive a confirmation e-mail, and you are only added to the list once you click the link in it. As proof of consent, the sign-up time, your IP address and the confirmation time are stored. You may withdraw your consent at any time and without giving reasons via the unsubscribe link at the bottom of every newsletter, or by e-mailing the address above; withdrawal does not affect the lawfulness of processing carried out beforehand.
When you visit the site, the server automatically records log data such as IP address, date and time, the file requested and browser type, as required for technical operation and security. Legal basis: Art. 5/2-(f) KVKK (legitimate interest in secure operation). This data is not used for advertising or profiling.
To understand how often and how the site is used, we keep visitor statistics that run entirely on our own server and do not rely on any third-party service. What is recorded: IP address, country/city derived from it, date and time, the language version and page path viewed, the address you came from (referrer), browser and operating system information (user agent), device type (desktop/tablet/mobile), links and buttons clicked, scroll depth and time spent on the page. No cookie is set for this; the session identifier is kept only in the tab storage (sessionStorage) and is deleted when the tab is closed. Legal basis: Art. 5/2-(f) KVKK (legitimate interest in improving the website). The data stays solely on our own server (Hetzner, Germany), is never shared with third parties and is deleted automatically after 12 months. You may exercise your right to object at any time by e-mailing the address above.
Your personal data is collected entirely by automated means in electronic form — through the details you enter into the forms yourself and through the server's automatic records. No special categories of personal data are requested; please do not enter such information into the forms.
Your data is never sold or passed on to third parties for marketing purposes. However, the site is hosted on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), and form e-mails are sent via the infrastructure of ALL-INKL.COM – Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany). Your data is therefore technically transferred abroad. Such transfer takes place under the appropriate safeguards provided for in Art. 9 KVKK (including standard contractual clauses) and/or on the basis of your explicit consent. These providers act as data processors and have access only to the extent necessary to deliver the service.
This website uses no advertising or tracking cookies, and no third-party analytics tools (e.g. Google Analytics) are embedded. Your language choice is not stored in your browser: which language you see follows solely from the address you open (/, /de/, /en/ and /ru/ for the home page; on these legal pages also the ?lang= parameter). Only the statistics session identifier is kept in the tab storage (sessionStorage) until the tab is closed, and it is deleted when you close it. This entry is technically necessary; you can remove it at any time by clearing your browser data.
The fonts used (Montserrat, Pacifico) are hosted on our own server. No connection to Google or any other font provider is made when the page loads, so no data is transferred in this respect.
Embedded videos are not loaded when the page opens; they load only after you click the play button, via YouTube (Google Ireland Limited) in enhanced privacy mode (youtube-nocookie.com). Data transfer (including your IP address) begins only with that click, based on your consent (Art. 5/1 KVKK). Details: Google Privacy Policy.
Track previews are loaded directly from Apple servers (audio-ssl.itunes.apple.com) only when you press play. The connection is established at that moment and your IP address is transmitted to Apple; processing is based on your consent (Art. 5/1 KVKK). Details: Apple Privacy Policy.
Links to Spotify, Apple Music, Deezer, Instagram, TikTok, Facebook and YouTube lead to external platforms, where the privacy policy of the respective provider applies. We have no influence over any processing that takes place after you follow such a link.
Messages received via the contact form are kept for a reasonable period after your enquiry has been resolved and are deleted once the purpose no longer applies. Newsletter data is stored until you withdraw your consent. Server logs are retained only briefly for technical and security purposes. Visitor statistics are deleted automatically after 12 months. Statutory retention obligations remain unaffected.
By contacting the data controller, you have the following rights in relation to yourself:
You may submit your request in writing to the address above, or to info@ayhandogan.com.tr, in accordance with the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller. Requests are answered within 30 days at the latest. If you are not satisfied with the outcome, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board (KVK Kurulu).
If you visit the site from the European Union or the European Economic Area, the processing is additionally assessed under the GDPR. Legal bases: Art. 6(1)(a) for the newsletter, Art. 6(1)(b) and (f) for contact enquiries, Art. 6(1)(f) for server logs (legitimate interest in secure operation) and Art. 6(1)(f) for visitor statistics (legitimate interest in improving the website; you may object at any time by e-mail). Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21); you may also lodge a complaint with a supervisory authority. A data processing agreement (DPA) is in place with the hosting provider Hetzner.
This text may be updated to reflect technical or legal changes. The version in force is always published on this page.