Privacy Policy and Personal Data Protection Notice

Last updated: 7 May 2026

1. Data Controller

Under Turkey's Personal Data Protection Law No. 6698 ("KVKK") and applicable data protection regulations, the data controller is:

2. Personal Data Collected

The following personal data is collected through forms on dorukyalcinsoy.com (e-book download, executive program pre-registration, podcast guest application, contact):

• Identity: Full name
• Contact: Email address (corporate email required for the pre-registration form)
• Professional information: Company / role (optional, in the pre-registration form)
• Project information: Project, business model and social media links shared in the podcast application
• Message content: Any information you share in your contact message

3. Purposes of Processing

• Delivery of the e-book, guide or content you requested
• Reviewing your Executive AI Transformation Program pre-registration and following up
• Reviewing your podcast guest application and notifying you of the outcome
• Sharing educational content, new guides, blog posts and event announcements about AI (you may opt out at any time)
• Responding to your contact requests

4. Legal Basis

Your personal data is processed based on your explicit consent under Article 5 of KVKK. You may withdraw your consent at any time.

Commercial electronic communications (Law No. 6563): A separate explicit opt-in will be requested for any commercial electronic message containing product, service, campaign or promotional content, and will be registered with the Commercial Communications Management System (İYS). Declining this opt-in does not affect the service you requested through the form.

5. Data Transfers

Your personal data may be shared with the following third parties for the purposes stated above:

• Email service providers, for communication and notifications (EU / US regions)
• Cloud infrastructure and database providers, for storage (US / EU regions)
• Analytics providers, for site analytics and performance measurement

When your data is transferred abroad, the transfer is performed on the basis of your explicit consent and in compliance with the safeguards under Article 9 of KVKK. The privacy policies of these third-party service providers apply to the data they process; the data controller is not responsible for those policies.

6. Retention Period

Your personal data is retained for a maximum of 2 (two) years from your last interaction. At the end of this period, or upon withdrawal of your consent, your data is deleted, destroyed or anonymized.

7. Your Rights (KVKK Art. 11)

Under Article 11 of KVKK you have the following rights:

• To learn whether your personal data is being processed
• To request information about your personal data, if processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties (in Turkey or abroad) to whom your data has been transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction of your personal data under the conditions of Article 7 of KVKK
• To object to a result that is to your detriment, arising from automated processing of your data
• To claim compensation if you suffer damage due to unlawful processing of your personal data

8. How to Exercise Your Rights

To exercise the rights above, please contact us using the channel below:

Your requests will be answered within 30 (thirty) days at the latest.

9. Updates

This notice may be updated to reflect changes in legal requirements or in our data processing activities. The current version is always published on this page.