Last updated: 8 October 2026
This notice explains the scope in which your personal data is processed when you visit torospanos.com, in accordance with Turkey’s Personal Data Protection Law No. 6698 (“KVKK”). KVKK is the Turkish data protection statute; it is the framework that applies to this site, which is operated from Turkey.
1. Data controller
The person acting as data controller under KVKK:
- Data controller: Toros Panos
- Website: torospanos.com
- Email: info@torospanos.com
- Location: Istanbul, Turkey
This site is a personal publication (a blog). It does not sell products and has no membership system or payment processing.
2. Personal data processed and how it is collected
| Data category | Data processed | Collection method |
|---|---|---|
| Contact data | Name, email address, message content | If you fill in the contact form or send an email |
| Comment data | Name, email address, comment text, IP address, browser information | If you leave a comment on a post (WordPress) |
| Transaction security data | IP address, browser and device information, operating system, access time | Automatically, via server logs |
| Usage data | Pages viewed, time on site, referring source, approximate location (city level) | Automatically, via cookies and Google Analytics |
Special categories of personal data (health, religion, membership information and similar) are neither requested nor processed on this site. Please do not enter information of that kind into the contact form or the comment field.
3. Purposes of processing
- Responding to the questions, suggestions and requests you send
- Publishing and moderating comments and filtering out spam
- Keeping the site working and secure, and detecting abuse and attacks
- Measuring how content performs and improving the site experience
- Meeting legal obligations
4. Legal grounds
Your personal data is processed on the following legal grounds under Article 5 of KVKK:
- Your explicit consent (Art. 5/1): where you submit the contact form, leave a comment, or consent to non-essential cookies
- The legitimate interest of the data controller (Art. 5/2-f): securing the site, preventing abuse, and producing aggregate usage statistics that are not linked to an individual
- Legal obligation (Art. 5/2-c): retention and disclosure obligations arising from legislation
5. Cookies
The site uses cookies in order to function and to be measured:
| Cookie type | Purpose | Source |
|---|---|---|
| Essential cookies | Session management, remembering comment details, security | WordPress |
| Performance cookies | Page caching and acceleration | LiteSpeed Cache |
| Analytics cookies | Visitor numbers, popular content, traffic sources | Google Analytics (Google Site Kit) |
| Advertising cookies | Serving ads, measuring ad performance, personalised ads where consented | Google AdSense |
You can delete or block cookies at any time through your browser settings. If essential cookies are blocked, some parts of the site may not work properly.
Google AdSense and third-party advertising
This site may display ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
You can opt out of personalised advertising via Google My Ad Center, and manage third-party vendor cookies at aboutads.info/choices or youronlinechoices.eu. How Google uses this data is explained here. Advertising and analytics cookies run according to the choice you make in the cookie banner.
6. Transfer of data
Your personal data is not sold or rented to third parties for marketing purposes. It is processed only through the following service providers, and only to the extent the service requires:
- Hosting provider: hosting the site and keeping server logs
- Google (Analytics / Search Console): measuring visit statistics
- Email service provider: conducting correspondence with you
Transfers abroad: the analytics services provided by Google may require data to be processed on servers outside Turkey. Under Article 9 of KVKK, this transfer takes place only if you consent to analytics cookies. If you do not accept analytics cookies, the transfer does not occur.
7. Retention periods
| Data | Retention period |
|---|---|
| Contact form submissions and email correspondence | 2 years from the end of the correspondence |
| Comments | Until the comment is deleted or removed from the site |
| Server logs | 12 months maximum |
| Analytics data | For the retention period configured in Google Analytics (14 months maximum) |
Once the period expires, the data is deleted, destroyed or anonymised.
8. Data security
The site is served over HTTPS. Access to the admin panel is restricted with a strong password, and the software and plugins in use are kept up to date. Even so, no transmission over the internet can be guaranteed to be 100% secure.
9. Your rights as a data subject
Under Article 11 of KVKK, by applying to the data controller you have the right to:
- learn whether your personal data is being processed;
- request information about it if it has been processed;
- learn the purpose of processing and whether the data is used in line with that purpose;
- know the third parties, in Turkey or abroad, to whom the data has been transferred;
- request correction if the data has been processed incompletely or inaccurately;
- request erasure or destruction within the conditions set out in Article 7 of KVKK;
- request that correction, erasure and destruction be notified to the third parties to whom the data was transferred;
- object to an outcome that works against you and results from analysis carried out solely by automated systems;
- claim compensation if you suffer loss because the data was processed unlawfully.
10. How to apply
You can send requests relating to the rights above, together with information establishing your identity, to info@torospanos.com. Applications are concluded within 30 days at the latest, in accordance with the Turkish Communique on the Procedures and Principles of Application to the Data Controller. Your application is free of charge; if the process incurs an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected or you are not satisfied with the response, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning the response and, in any case, within 60 days of the date of application.
11. Changes
This notice may be updated in line with changes in legislation or on the site. The current version is always published on this page and takes effect together with the “last updated” date above.