This notice explains the handling of personal data in briefing subscriptions, security logs, essential sessions and data-subject requests. Last updated: 17 July 2026.
Ogün Erşan Aydınlı is the controller for the PIL.OT project. Access, correction, erasure, objection and other data requests may be sent to info@pil-ot.org. No separate data protection officer has been appointed.
A subscription record contains the email address, language/interface preference, consent scope and version, registration time, active status and, where applicable, a pseudonymous recommendation code. The recommendation feature does not collect another person’s address; they join with their own consent. Infrastructure providers may process IP address, timestamp, request/response data, browser information and error logs to operate and secure the service. Special-category data are not intentionally requested.
Data are collected electronically through forms, editor sessions and server/security logs. The subscription address and preferences are processed on consent (KVKK Article 5(1) and, where applicable, GDPR Article 6(1)(a)) only to send the selected notices and administer evidence of consent. Essential security, abuse-prevention and service logs may be processed where necessary for service performance, legal obligations or legitimate interests that do not override fundamental rights. Declining consent does not restrict access to public pages.
Records are hosted in a MySQL database on Hostinger infrastructure and the application is delivered through Next.js/Node.js. Data may be shared only with processors required for hosting, security, maintenance, email delivery and privacy-focused site-traffic measurement. PIL.OT’s own persistent visitor/session measurement is activated only after consent. When configured, the Google Analytics 4 tag may run with storage denied by default and send cookieless measurement signals; Analytics cookies are enabled only after the user opts in. Lawful requests by competent authorities remain possible. Addresses are not sold, supplied to data brokers or used for third-party marketing outside the selected PIL.OT notices.
The actual hosting and support location depends on the Hostinger data centre and service configuration. If data are transferred outside Türkiye or the European Economic Area, the relevant KVKK adequacy/appropriate-safeguard rules and, where applicable, a GDPR adequacy decision, standard contractual clauses or another valid transfer mechanism must be assessed. Current location or safeguard information may be requested from the controller.
The public site does not track visitors for advertising or behavioural profiling. PIL.OT’s own persistent visitor and session identifiers are created only after permission is given for optional measurement cookies; those identifiers are one-way hashed on the server and IP addresses and raw identifiers are not stored. When configured, Google Analytics 4 uses Advanced Consent Mode: the tag may load with storage denied when a page opens, in which case Analytics cookies are neither read nor written but cookieless measurement and consent signals may be sent to Google. Analytics cookies are enabled only after the user opts in. Advertising storage, Google signals and advertising personalisation remain disabled. The preference is stored locally on the device and may be changed at any time through the “Cookie preferences” control. Theme/language preferences may also be stored locally; the editor area uses an essential authentication and security cookie and motor pages are excluded from traffic measurement. Subscriber data are not subject to solely automated decisions or profiling that produce legal or similarly significant effects. The editorial AI system processes public legal sources and does not make decisions about subscribers.
An active subscription is retained while it continues. On opt-out or withdrawal, active sending is stopped; the minimum consent/withdrawal audit record required for proof, security or legal obligations may be retained only for the applicable limitation or retention period. Technical logs are kept for a limited period based on security needs and provider policy. You may withdraw consent through the contact address; no charge applies.
Under KVKK Article 11 you may request confirmation and information, learn recipients and purpose, seek correction or erasure, object to an adverse automated-analysis result and request compensation where applicable. If GDPR applies, rights of access, rectification, erasure, restriction, portability, objection and withdrawal are also available subject to their conditions. You may contact the controller and may lodge a complaint with Türkiye’s Personal Data Protection Authority or the competent EU/EEA supervisory authority where applicable.
Briefings and launch notices are sent only within the scope stated in the form. You may opt out or withdraw consent at any time; no charge applies. Where a message qualifies as a commercial electronic message, Türkiye’s Law No 6563, the relevant regulation and any applicable Message Management System obligations remain reserved; sending will stop within the statutory period after an opt-out request.
This notice describes the current technical and organisational arrangement. Mandatory KVKK/GDPR provisions and data-subject application rights remain unaffected; this is not legal advice for an individual situation.
Send a data request