Privacy Policy

Last Updated:

  1. Introduction
    Welcome to Techaptic (techaptic.com), a technology knowledge library operated by Melih Çınar (“we,” “us,” or “our”). We are deeply committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains what personal data we collect from you, why we collect it, how we use and protect it, and what rights you have regarding your data.
    We process your data in strict compliance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR) and Turkey’s Law on the Protection of Personal Data No. 6698 (KVKK). This policy applies to all visitors, users, and subscribers of our website and services. By using our site, you acknowledge that you have read and understood this policy.
  2. Data Controller
    The Data Controller responsible for your personal data is:
    Name/Entity: Melih Çınar (Owner of Techaptic)
    Email: [email protected]
    As the Data Controller, we are responsible for determining the purposes and means of processing your personal data.
  3. What Personal Data We Collect and Why
    We collect personal data in different ways depending on how you interact with our site. We only process data for specific, explicit, and legitimate purposes, and only when we have a lawful basis to do so.
    • 3.1. When You Browse Our Website (All Visitors)
      • Data Processed: Your IP address and device/browser info (User-Agent) are logged for security.
      • Purpose of Processing: Operational integrity and security. Our isolated server on Oracle Cloud is protected by a multi-layered defense including a Web Application Firewall (WAF) and behavioral threat detection systems.
      • Lawful Basis (GDPR/KVKK): Our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) in maintaining a secure service.
      • Data Processors: Infrastructure providers (Oracle Cloud) and our CDN (Cloudflare).
    • 3.2. When You Subscribe to Our Newsletter and Access Resources
      • Data Processed: Your email address and, optionally, your name.
      • Purpose of Processing:
        • To manage your subscription and, based on your consent, send you periodic newsletters, articles, and other content related to our site.
        • To verify your status as a confirmed subscriber when you request to download a resource. This allows us to grant you access to the file.
      • How We Process:
        • Subscription: We use a double opt-in process. When you sign up, you must click a confirmation link sent to your email. This confirms your explicit consent to be on our mailing list.
        • Downloads: When you wish to download a file from a post, we will ask for your email address at that time. Our system will check if your email corresponds to an active, confirmed subscriber before providing the download link.
      • Lawful Basis (GDPR/KVKK): Your Consent (GDPR Art. 6(1)(a), KVKK Art. 5(1)) via double opt-in, and our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) to ensure that only verified subscribers can access protected resources.
      • Data Storage and Processing: Your subscription data is stored and managed within our website’s database using our internal CRM system. To deliver our newsletter and necessary system notifications to you, contact info is securely transmitted to our email delivery providers (e.g., Brevo, SMTP2GO), which act as data processors for this task.
    • 3.3. When You Contact Us via Our Forms (e.g., General Inquiries, Feedback)
      • Data Processed: The personal data you provide in the form (name, email, message content), and IP address for security.
      • Purpose of Processing: To respond to your specific inquiry, question, or feedback.
      • Lawful Basis (GDPR/KVKK): Our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) in providing effective customer service and communicating with our users.
      • Data Processors: Your submission is processed by our form infrastructure within our website. It is then delivered to our business email inbox (Zoho). Spam filtering is performed strictly by Cloudflare Turnstile.
    • 3.4. When You Register for an Account or Use Our Community
      • Data Processed: Your chosen username, email, hashed password, IP address, posted content, earned badges, and joined Spaces.
      • Purpose of Processing: To create and maintain your user account, allowing you to participate in our community platform.
      • Lawful Basis (GDPR/KVKK): Performance of a Contract (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)). By registering, you are entering into an agreement with us to provide you with community access.
      • Data Processors and Backups: Data is managed on our own servers. To prevent data loss and ensure Disaster Recovery, military-grade encrypted backups of our database are securely synchronized to Google Drive cloud storage. Encryption keys reside strictly on our server.
    • 3.5. When You Purchase a Digital Product
      • Data Processed: Name, email address, billing information, and a record of your purchases.
      • Purpose of Processing: To process your payment, deliver the product, provide support, and for legal/accounting purposes.
      • Lawful Basis (GDPR/KVKK): Performance of a Contract (GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)).
      • Data Processors: Financial transactions are handled by secure third-party payment processors (e.g., Stripe, PayPal). We do not store your full credit card information.
    • 3.6. When You Use the Site Search
      • Data Processed: The search terms you enter and your IP address.
      • Purpose of Processing: To provide relevant search results and to analyze search activity anonymously to improve site navigation.
      • Lawful Basis (GDPR/KVKK): Our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) in improving our website’s functionality and user experience.
      • Data Processor: This data is processed by our internal search infrastructure.
    • 3.7. Website Traffic Analysis
      • Data Processed: IP addresses are instantly anonymized. No personally identifiable information (PII) is collected, and no cookies are placed on your device.
      • Purpose of Processing: To understand site usage in a strictly privacy-respecting manner.
      • Lawful Basis (GDPR/KVKK): Our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) due to its completely cookieless and anonymous nature.
      • Data Processor: None. Visitor analytics are performed using Umami, an open-source software hosted entirely on our own servers. Your data never leaves our infrastructure and is never shared with third parties.
    • 3.8. When You Interact with Third-Party Content
      • YouTube Videos: Our site uses ‘Click-to-Load’ technology to embed videos, enhancing performance and protecting your privacy. Video thumbnails are hosted locally. No data (including your IP address) is transferred to Google/YouTube servers, and no cookies are placed on your device until you click the ‘Play’ button. By playing the video, you acknowledge and accept that data processing by YouTube will commence.
      • Affiliate Links: If you click on an affiliate link, the third-party website may place a tracking cookie on your device.
      • Lawful Basis (GDPR/KVKK): Your Consent (GDPR Art. 6(1)(a), KVKK Art. 5(1)), managed through our cookie consent banner.
    • 3.9. When You Use Our Forms (Spam and Abuse Prevention)
      • Data Processed: We use Cloudflare Turnstile, a privacy-focused challenge system. Unlike traditional CAPTCHAs, Turnstile verifies that you are human without tracking your browsing history or storing cookies on your device. It may collect technical data such as IP address and browser characteristics.
      • Purpose of Processing: To distinguish between human users and automated bots to protect our forms and login areas from spam and brute-force attacks.
      • Lawful Basis (GDPR/KVKK): Our Legitimate Interest (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)) in securing our website and services from abuse.
      • Data Processor and Policies: This data is processed by Cloudflare, Inc. Your interaction with Turnstile is subject to the Cloudflare Privacy Policy.
  4. Who We Share Your Data With (Our Data Processors)
    We do not sell, rent, or trade your personal data. We only share it with trusted Data Processors who provide services on our behalf:
    • Oracle Corporation (USA): Cloud infrastructure and hosting.
    • Cloudflare, Inc. (USA): CDN, WAF, and spam prevention (Turnstile).
    • Brevo (France, EU) & SMTP2GO (New Zealand/Global): Email delivery for newsletters and transactional system notifications.
    • Google LLC (USA): Used strictly for YouTube video embedding and storing encrypted system backups (Google Drive).
    • Zoho Corporation (India/EU Data Centers): Business email hosting.
  5. International Data Transfers
    Your personal data may be processed outside EEA/Turkey, primarily in the USA.
    • Standard Contractual Clauses (SCCs): We use KVKK approved Standard Contractual Clauses.
  6. Data Security and Retention
    We use appropriate technical measures like encryption (SSL/TLS), firewalls, and regular updates.
    • Newsletter Subscriptions: Retained as long as you are subscribed.
    • Security Logs (IP Addresses): Minimum 1 year.
    • Analytics Data: 14 months.
  7. Your Data Protection Rights
    You have rights to Access, Rectification, Erasure (‘Right to be Forgotten’), Restriction, Objection, Data Portability, and Withdrawal of Consent. You also have the right to lodge a complaint with KVKK or EU authorities.
    To exercise your rights: [email protected]
  8. Children’s Privacy
    Our website is not intended for children under 16.
  9. Changes to This Privacy Policy
    We may update this policy. Significant changes will be notified to you via email or a prominent notice on our website.
Scroll to Top