Legal Information

KVKK Privacy Notice

Last updated: May 31, 2026

In accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communique on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform, the following explanations are provided by Serteser Consulting (“Data Controller”) regarding the processing of your personal data.

1. Data Controller

Burak Serteser (Biomedical Engineer) provides individual consulting services under the name Serteser Consulting.

2. Categories of Personal Data Processed

  • Identity information: Full name (information you provide during contact and consulting).
  • Contact information: Email address, phone number, institution details.
  • Professional information: Academic title, institution, research area (information you share within the scope of a consulting request).
  • Meeting scheduling data: The name, email, meeting topic, and time zone you share when creating an appointment through Calendly.
  • Technical data (anonymous statistics): IP address (hashed and discarded by Umami), browser type, session country information, page views. No cookies are used.
  • Client content: Data you share during the course of a consulting engagement (anonymous/de-identified clinical data, article drafts, analysis files). This data is destroyed at the end of the engagement or retained under a legal obligation pursuant to KVKK Article 5/2.

3. Purposes of Processing

  • Carrying out the consulting service (establishment and performance of the contract, KVKK Article 5/2-c).
  • Responding to contact requests (legitimate interest, KVKK Article 5/2-f).
  • Fulfilling legal obligations (invoicing, tax legislation, KVKK Article 5/2 legal obligation clause).
  • Anonymous monitoring of site visit statistics (legitimate interest, KVKK Article 5/2-f).

4. Transfer

Your personal data may be transferred to the following third parties, limited to the relevant purpose:

  • Hosting infrastructure: Vercel Inc. (USA). Site publishing infrastructure.
  • Appointment scheduling: Calendly LLC (USA). When a meeting is created.
  • Analytics: Umami Cloud (EU). Cookie-less, anonymous site statistics.
  • Email: Standard email service provider (TR).
  • Official authorities: Judicial / administrative authorities where required by legislation within the scope of KVKK Article 8.

International transfers are carried out within the framework of KVKK Article 9 and the relevant decisions of the KVKK Board, on the basis of a standard contract type and the privacy measures of the service provider.

5. Method of Collection and Legal Basis

Your personal data is collected through automated or non-automated methods via the contact requests you submit through the website, email, the Calendly appointment form, WhatsApp messages, and consulting meetings. The legal basis is KVKK Article 5/2 (establishment of a contract, legal obligation, legitimate interest) and the explicit consent of the data subject.

6. Retention Period

  • Contact and meeting scheduling data: 2 years from your last contact.
  • Consulting files: duration of the contract + 5 years (financial legislation).
  • Anonymous site statistics: 12 months (Umami default).
  • In the event of a legal dispute, until the end of the relevant statute of limitations.

7. Rights Under KVKK Article 11

As a data subject, you have the following rights:

  • To learn whether your personal data is being processed.
  • To request information if it has been processed.
  • To learn the purpose of processing and whether it is used in accordance with that purpose.
  • To know the third parties to whom it has been transferred domestically or abroad.
  • To request correction if it has been processed incompletely or incorrectly.
  • To request its deletion / destruction within the framework of KVKK Article 7.
  • To request that any correction or deletion be notified to the third parties to whom it was transferred.
  • To object to a result arising against you as a consequence of analysis by automated systems.
  • To request compensation if you have suffered damages due to unlawful processing.

8. Application Method

You may submit your requests under Article 11 by a wet-signed petition or to burak@serteser.com.tr in the manner specified in the Communique on the Principles and Procedures for Application to the Data Controller. Your requests will be concluded within 30 days at the latest pursuant to KVKK Article 13/2.