Privacy notice (KVKK)
In accordance with Article 10 of the Turkish Personal Data Protection Law no. 6698 (KVKK), this notice explains which of your personal data is processed when you use ompcity.com, for what purpose and how.
Data controller
Tuğberk Sivri
Bursa
Email: [email protected]
Data processed, purposes and legal grounds
| Data | Purpose | Legal ground |
|---|---|---|
| Name, email address, password (irreversibly hashed) | Creating your account, signing you in, sending verification and password reset emails | Formation and performance of a contract (Art. 5/2-c) |
| IP address, port, date and time, visited address, browser information | Keeping access logs under Law no. 5651; security and preventing abuse | Expressly provided for by law and legal obligation (Art. 5/2-a, ç) |
| Comments, ratings, votes, application and form contents | Providing community features, moderating content, reviewing complaints | Performance of a contract and legitimate interest (Art. 5/2-c, f) |
| Session cookie | Keeping you signed in (strictly necessary cookie; no advertising or tracking cookies are used) | Performance of a contract (Art. 5/2-c) |
How data is collected
Data is collected electronically through what you enter in the membership and contact forms and through logs our servers keep automatically while you use the site. If you sign in with Google, only your name, email address and profile photo are received from Google.
Transfers
Your data is not sold and not shared for advertising. The following service providers are used to run the service:
- Server hosting (Contabo, Germany): all data is stored on these servers.
- Cloudflare (USA): domain, traffic protection and encrypted backup storage.
- Resend (USA): sending verification and notification emails (only the email address and message content).
- Anthropic (USA): in comment moderation, automatic classification of the text of comments flagged as suspicious (no identity information is sent).
Transfers abroad are made in accordance with the conditions of Article 9 of the Law. In the event of legal requests from competent public authorities and courts, data may be shared with them.
Retention periods
- Account information: for as long as the account stays open; deleted within 30 days at the latest after the account is deleted.
- Access logs (IP, time): 2 years, as required by Law no. 5651.
- Backups: deleted automatically after 30 days.
Your rights
Under Article 11 of the Law, you have the right to learn whether your data is processed, to request information, to request correction or deletion, to know the third parties it was transferred to, to object to the result of automated analysis and to claim compensation for damages. You can send your request with information that verifies your identity to [email protected]; it will be answered within 30 days at the latest.