PILOTPRIVACY / 01PIL.OT / Privacy · KVKK · GDPR
PIL.OT Beta
PIL.OT / Privacy · KVKK · GDPR

Subscription and site data are processed for limited purposes.

This notice explains the handling of personal data in briefing subscriptions, security logs, essential sessions and data-subject requests. Last updated: 17 July 2026.

01

Controller and contact

Ogün Erşan Aydınlı is the controller for the PIL.OT project. Access, correction, erasure, objection and other data requests may be sent to info@pil-ot.org. No separate data protection officer has been appointed.

02

Data collected

A subscription record contains the email address, language/interface preference, consent scope and version, registration time, active status and, where applicable, a pseudonymous recommendation code. The recommendation feature does not collect another person’s address; they join with their own consent. Infrastructure providers may process IP address, timestamp, request/response data, browser information and error logs to operate and secure the service. Special-category data are not intentionally requested.

03

Collection method, purpose and legal basis

Data are collected electronically through forms, editor sessions and server/security logs. The subscription address and preferences are processed on consent (KVKK Article 5(1) and, where applicable, GDPR Article 6(1)(a)) only to send the selected notices and administer evidence of consent. Essential security, abuse-prevention and service logs may be processed where necessary for service performance, legal obligations or legitimate interests that do not override fundamental rights. Declining consent does not restrict access to public pages.

04

Recipients and service providers

Records are hosted in a MySQL database on Hostinger infrastructure and the application is delivered through Next.js/Node.js. Data may be shared only with processors needed for hosting, security, maintenance and, if enabled later, email delivery, subject to purpose limitation; lawful requests by competent authorities remain possible. Addresses are not sold, supplied to data brokers or used for third-party marketing outside the selected PIL.OT notices.

05

Infrastructure and international processing

The actual hosting and support location depends on the Hostinger data centre and service configuration. If data are transferred outside Türkiye or the European Economic Area, the relevant KVKK adequacy/appropriate-safeguard rules and, where applicable, a GDPR adequacy decision, standard contractual clauses or another valid transfer mechanism must be assessed. Current location or safeguard information may be requested from the controller.

06

Cookies, local preferences and automated decisions

The public site uses no advertising or behavioural-profiling cookies. Theme/language preferences may be stored locally on the device; the editor area uses an essential authentication and security cookie. Subscriber data are not subject to solely automated decisions or profiling that produce legal or similarly significant effects. The editorial AI system processes public legal sources and does not make decisions about subscribers.

07

Retention and leaving the list

An active subscription is retained while it continues. On opt-out or withdrawal, active sending is stopped; the minimum consent/withdrawal audit record required for proof, security or legal obligations may be retained only for the applicable limitation or retention period. Technical logs are kept for a limited period based on security needs and provider policy. You may withdraw consent free of charge through the contact address.

08

Your rights and complaints

Under KVKK Article 11 you may request confirmation and information, learn recipients and purpose, seek correction or erasure, object to an adverse automated-analysis result and request compensation where applicable. If GDPR applies, rights of access, rectification, erasure, restriction, portability, objection and withdrawal are also available subject to their conditions. You may contact the controller and may lodge a complaint with Türkiye’s Personal Data Protection Authority or the competent EU/EEA supervisory authority where applicable.

09

Electronic-message preferences

Briefings and launch notices are sent only within the scope stated in the form. You may opt out or withdraw consent free of charge at any time. Where a message qualifies as a commercial electronic message, Türkiye’s Law No 6563, the relevant regulation and any applicable Message Management System obligations remain reserved; sending will stop within the statutory period after an opt-out request.

This notice describes the current technical and organisational arrangement. Mandatory KVKK/GDPR provisions and data-subject application rights remain unaffected; this is not legal advice for an individual situation.

Send a data request