Privacy Policy

Last update:

June 14, 2026

Çağdaş Ünal ("I", "me", "my") operates the website cagd.as. I respect your privacy and handle the limited personal data this site collects lawfully and transparently. This policy explains who is responsible, what data is collected, why, who it is shared with, and the rights you have. It is written to comply with Turkey's Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the EEA and the UK, the GDPR / UK GDPR.

In short: cagd.as is a personal portfolio. It has no accounts, no newsletter, and no online payments. The only personal data it handles is what you send through the contact form, what you enter to book a call, and standard analytics and security data from cookies, and non-essential cookies stay off until you allow them.

1. Who is responsible (data controller)

The data controller is Çağdaş Ünal, an individual based in Turkey. Contact for any privacy question, or to exercise your rights: cagdas@cagdasunal.com.

2. What data is collected

  • Information you provide: when you use the contact form (your name, email address, and message) or book a call through the embedded scheduler (your name, email, and chosen time).
  • Information collected automatically: limited technical and usage data set by cookies and similar technologies when you visit, such as IP address, device and browser type, and pages viewed. See the Cookie Policy for the full list.

The site does not collect special-category data, run user accounts or a newsletter, or take payments.

3. Why your data is used, and the legal basis

  • To respond to your enquiry or arrange a call: processing the contact-form and booking details. Legal basis: taking steps at your request (GDPR Art. 6(1)(b)) and the legitimate interest in replying to you (Art. 6(1)(f)); under the KVKK, processing that is necessary for a legitimate interest and carried out at your request.
  • Analytics cookies: only with your consent (GDPR Art. 6(1)(a); explicit consent under the KVKK), which you can withdraw at any time.
  • Security: protecting the site and its forms from spam and abuse (Cloudflare Turnstile, Altcha). Legal basis: the legitimate interest in keeping the site secure (Art. 6(1)(f)).

4. Who your data is shared with

I do not sell your personal data. It is shared only with the service providers ("processors") that run the site, each under their own privacy terms and only to the extent needed:

  • Webflow: website hosting and delivery. (webflow.com/legal/privacy)
  • Google (Tag Manager and Analytics 4): aggregated website analytics, loaded only after you allow analytics. (policies.google.com/privacy)
  • Cloudflare (Turnstile): spam and bot protection on forms; processes limited technical data such as your IP address. (cloudflare.com/privacypolicy)
  • Cal.com: the embedded scheduling widget used to book a call; processes the booking details you enter. (cal.com/privacy)
  • Altcha: privacy-friendly spam and bot protection on forms; works without cookies, tracking, or fingerprinting. (altcha.org/privacy-policy)

5. International data transfers

Some of these providers process data outside Turkey and the EEA (for example in the United States or the EU). Where data is transferred to a country without an adequacy decision, the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or on a recognised data-transfer framework where the provider is certified.

6. How long data is kept

Contact-form and booking messages are kept only as long as needed to deal with your enquiry and any reasonable follow-up, and are then deleted. Analytics data is held in aggregated form by Google for their standard retention periods.

7. Your rights

Under the KVKK (Article 11) you have the right to: learn whether your personal data is processed and request information about it; know the purpose of processing and whether it is used accordingly; know any third parties to whom it is transferred; request correction or deletion; and object to a result produced solely by automated analysis. Under the GDPR / UK GDPR you also have the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time.

To exercise any right, email cagdas@cagdasunal.com. You can change or withdraw your cookie consent at any time via the "Cookie settings" link in the footer. You may also lodge a complaint with the Turkish Data Protection Authority (KVKK) or, if you are in the EEA or the UK, with your local data protection authority or the UK Information Commissioner's Office (ICO).

8. Cookies

cagd.as uses cookies as described in the Cookie Policy. Non-essential cookies are set only after you opt in through the consent banner; Google's analytics tags are governed by Google Consent Mode.

9. Security

I use reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access.

10. Children

cagd.as is a professional portfolio, is not directed at children, and does not knowingly collect their data.

11. Changes and contact

I may update this policy from time to time; the "Last updated" date above shows the latest version. Questions: cagdas@cagdasunal.com.