Privacy Policy and Personal Data Protection Notice

Last updated: 23 August 2026

1. Data Controller

Under Turkey's Personal Data Protection Law No. 6698 ("KVKK") and applicable data protection regulations, the data controller is:

2. Personal Data Collected

The following personal data is collected through forms on dorukyalcinsoy.com (e-book download, executive program pre-registration, podcast guest application, contact):

• Identity: Full name
• Contact: Email address (corporate email required for the pre-registration form)
• Professional information: Company / role (optional, in the pre-registration form)
• Project information: Project, business model and social media links shared in the podcast application
• Message content: Any information you share in your contact message

Visit measurement (applies even if you never fill in a form): When you visit the site we record the page viewed, where you arrived from (the referring site's address or the campaign tag in the link), device type (mobile / desktop) and page language.

This measurement uses no cookies; no identifier is written to your browser, no cross-site tracking takes place and no profile is built about you. Your IP address is not stored - only an irreversibly hashed form of it is kept, solely to estimate the number of unique visitors. The purpose is to understand which content draws interest from which channel; you cannot be identified from this data.

3. Purposes of Processing

• Delivery of the e-book, guide or content you requested
• Understanding which content draws interest from which channel and improving the site accordingly (cookieless visit measurement that does not identify you)
• Reviewing your Executive AI Transformation Program pre-registration and following up
• Reviewing your podcast guest application and notifying you of the outcome
• Sharing educational content, new guides, blog posts and event announcements about AI (you may opt out at any time)
• Responding to your contact requests

4. Legal Basis

Your personal data is processed based on your explicit consent under Article 5 of KVKK. You may withdraw your consent at any time.

Exception for visit measurement: Because the cookieless visit measurement described above stores no data identifying you, your explicit consent is not requested for it. To the extent this data qualifies as personal data, it is processed on the basis of legitimate interest under Article 5/2-(f) of the KVKK, without prejudice to your fundamental rights and freedoms, and used solely to measure which content draws interest from which channel.

Commercial electronic communications (Law No. 6563): A separate explicit opt-in will be requested for any commercial electronic message containing product, service, campaign or promotional content, and will be registered with the Commercial Communications Management System (İYS). Declining this opt-in does not affect the service you requested through the form.

5. Data Transfers

Your personal data may be shared with the following third parties for the purposes stated above:

• Email service providers, for communication and notifications (EU / US regions)
• Cloud infrastructure and database providers, for storage (US / EU regions)
• Analytics providers, for site analytics and performance measurement

When your data is transferred abroad, the transfer is performed on the basis of your explicit consent and in compliance with the safeguards under Article 9 of KVKK. The privacy policies of these third-party service providers apply to the data they process; the data controller is not responsible for those policies.

6. Retention Period

Your personal data is retained for a maximum of 2 (two) years from your last interaction. At the end of this period, or upon withdrawal of your consent, your data is deleted, destroyed or anonymized.

7. Your Rights (KVKK Art. 11)

Under Article 11 of KVKK you have the following rights:

• To learn whether your personal data is being processed
• To request information about your personal data, if processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties (in Turkey or abroad) to whom your data has been transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction of your personal data under the conditions of Article 7 of KVKK
• To object to a result that is to your detriment, arising from automated processing of your data
• To claim compensation if you suffer damage due to unlawful processing of your personal data

8. How to Exercise Your Rights

To exercise the rights above, please contact us using the channel below:

Your requests will be answered within 30 (thirty) days at the latest.

9. Updates

This notice may be updated to reflect changes in legal requirements or in our data processing activities. The current version is always published on this page.