Who receives a request?
İsa Öztürk is the controller for the personal website activities described in these notices. This page helps you direct a personal data request to the correct person, with a clear scope and a safe method. A general technical question may follow a different process, so identifying the matter as a personal data request helps it reach the right assessment.
Privacy and personal data request contact: [email protected]. This channel is used to assess and respond to requests.
What you can request
Within Article 11 of KVKK, you may ask whether information about you is processed and obtain details if it is. You may ask about purposes, use consistent with those purposes and domestic or international recipients. You may request correction of inaccurate or incomplete records and, where the conditions apply, deletion or destruction and notification of relevant recipients. Statutory rights also cover objections to an adverse outcome arising solely from automated analysis and compensation for harm caused by unlawful processing.
Not every request necessarily results in immediate disclosure or deletion of every record. Other people's rights, a continuing legal duty or limited retention necessary to protect a right may need consideration, with reasons explained. An accepted request is acted upon; where all or part cannot be fulfilled, the reason is communicated.
Methods and information
Requests should use an appropriate method under KVKK and the Communiqué on Procedures and Principles for Applications to the Data Controller. Depending on the request, methods may include written submissions, registered electronic mail (KEP), secure electronic signature, mobile signature, an email previously provided and recorded in the system, or software specifically developed for requests. Listing a method does not represent an unconfigured KEP or physical address as existing.
When using a published verified channel, identify yourself, provide a response address, explain which page, message or account is concerned and state the action you request. Formal requests must include the identity, service-address and, where relevant, signature elements required by the Communiqué for that method. Do not attach identity-document images, passwords or unnecessary sensitive information to an initial general enquiry. If verification is needed, its purpose and a safe delivery method should be explained and the information requested kept proportionate.
Verification, timing and response
The controller may verify that a request comes from the person concerned or an authorised representative to avoid disclosing someone else's records. Merely typing an email address does not create authority to access every related record. Clarification may be requested when necessary to locate or understand the request; verification should not make the procedure unnecessarily difficult.
Properly submitted requests are concluded as soon as appropriate to their nature and within thirty days. Responses may be written or electronic. Requests are normally free; an operation with an additional cost may be charged according to the Board's tariff. Rules requiring reimbursement where the request arose from the controller's own error remain applicable.
Correction and deletion assessments also consider information passed to providers and the lifecycle of any backups. Restoring an older copy should not be used to undo a previously fulfilled deletion request. The purpose and ground for any limited record retained under a legal duty should be explained separately.
If you disagree with the outcome
KVKK provides application and complaint routes where a request is rejected, insufficiently answered or not answered in time. Complaints to the Board require attention to the prior controller-application procedure and statutory deadlines. The Authority explains the complaint period as thirty days after learning the response and, in all cases, within sixty days of the initial application. Rights to judicial remedies under general law are separately reserved.
Official explanations: Right to apply, duty to respond.
Last updated: 4 November 2026.