Privacy Policy

Last updated: 22.04.2026

1. Introduction and Scope

This Privacy Policy and Data Protection Notice (“Policy“) describes how Görkem Sarı, a sole proprietor operating under the trade name “Barlas Dijital” (“Barlas Dijital“, “we”, “us”, “our”), processes personal data in connection with the websites and digital services (“Services“) offered through the domains bdijital.com and barlasdijital.com.

This Policy is provided in accordance with disclosure obligations under the Turkish Personal Data Protection Law No. 6698 (“KVKK“) and applicable data protection regulations.

By using our Services, you acknowledge that you have been informed of the data processing activities described in this Policy.

2. Data Controller

The “data controller” under Article 3 of the KVKK is:

  • Legal name: Görkem Sarı (Sole Proprietor)
  • Trade name: Barlas Dijital
  • Tax Office: Büyükçekmece Tax Office, Istanbul, Turkey
  • Tax ID: 7460898686
  • Registered address: Ekinoba Mah. Ayberk Sk. Elit Apt. No: 5, İç Kapı No: 33, Büyükçekmece/Istanbul, Turkey
  • Email: info@bdijital.com
  • Website: https://bdijital.com

3. Categories of Personal Data Processed

We may process the following categories of personal data in connection with our Services:

3.1 Website Visitor Data

  • Identity information: Name and surname (when a contact form is submitted)
  • Contact information: Email address, phone number (when a contact form is submitted)
  • Transaction security data: IP address, browser information, operating system, visit timestamps, referring URL
  • Marketing data: Browsing behavior collected via cookies (see Section 11)
  • Customer transaction data: Inquiry content and subject submitted via contact forms

3.2 Customer and Business Partner Data

  • Identity and contact information: Name, surname, title, company information, email, phone
  • Financial data: Information required for invoicing and payment
  • Contractual data: Service scope, correspondence, project documentation

3.3 Personal Data Processed via LinkedIn Integration

Detailed in Section 10 below.

4. Purposes of Processing

We process your personal data for the following purposes:

  • Providing, maintaining, and improving our Services
  • Responding to your inquiries and managing related processes
  • Managing customer relationships and fulfilling contractual obligations
  • Conducting invoicing, accounting, and financial reporting processes
  • Fulfilling legal obligations (tax legislation, commercial law, KVKK, e-commerce regulations, etc.)
  • Ensuring website security and preventing potential misuse
  • Conducting analysis and statistics to improve service quality
  • Managing communication and marketing activities through Barlas Dijital’s corporate LinkedIn Company Page

5. Legal Basis for Processing

We process your personal data on one or more of the following legal bases under KVKK Articles 5 and 6:

  • Necessity for the establishment or performance of a contract (Art. 5/2-c)
  • Compliance with legal obligations (Art. 5/2-ç)
  • Legitimate interests of Barlas Dijital, provided that fundamental rights of data subjects are not infringed (Art. 5/2-f)
  • Data made public by the data subject (Art. 5/2-d)
  • Explicit consent (for marketing cookies, commercial electronic communications, and similar cases – Art. 5/1)

6. Methods of Data Collection

Your personal data is collected through:

  • Electronic channels including website contact forms, email, and telephone
  • Service contract negotiation and signing processes
  • Cookies and similar tracking technologies
  • Messages, comments, and interactions received through Barlas Dijital’s corporate social media accounts

Collection occurs through partially or fully automated means, in oral, written, or electronic form.

7. Sharing of Personal Data with Third Parties

Your personal data may be shared with the following recipient groups, limited to the purposes specified in this Policy and in compliance with KVKK Articles 8 and 9:

  • Infrastructure and hosting providers: For hosting websites and applications (Cloudflare, Inc., Güzel Hosting, etc.)
  • Email and communication providers: For corporate email services and contact-form-triggered notifications
  • Automation and integration infrastructure: Self-hosted n8n automation server under Barlas Dijital’s control for executing workflows
  • LinkedIn Corporation: As described in Section 10
  • Authorized public institutions: When requested under legal obligations
  • Legal, accounting, and financial advisors: For fulfilling legal and financial obligations

Your personal data is not shared with third parties for purposes other than those described in this Policy, nor is it sold or rented for advertising purposes.

8. International Data Transfers

Some infrastructure services we use (e.g., Cloudflare, LinkedIn) operate servers outside Turkey. In this context, your personal data may be transferred internationally in accordance with KVKK Article 9 and decisions of the Turkish Personal Data Protection Authority, by taking necessary technical and administrative measures and using countries with adequate protection or commitment letter / Authority approval mechanisms.

9. Data Retention Periods

Your personal data is retained for the duration required by processing purposes and, in any case, considering the periods required by legal retention obligations:

  • Contact form data: 2 years following the resolution of the inquiry
  • Contractual relationship data: 10 years after contract termination (under Turkish Commercial Code and Tax Procedure Law)
  • Website access logs: 2 years
  • Analytics data retained in connection with LinkedIn integration: Up to 24 months (Section 10)
  • Cookie data: For the lifespan of the relevant cookie

Data whose retention period has expired is deleted, destroyed, or anonymized.

10. Additional Notice Regarding LinkedIn API Integration

Barlas Dijital uses an automation system (“self-hosted n8n”) integrated with LinkedIn’s official Community Management API to manage its own LinkedIn Company Page (“Barlas Digital” – https://www.linkedin.com/company/bdijital/), publish content, and measure performance. This integration is limited solely to the Company Page owned and administered by Barlas Dijital; no actions are performed on third-party LinkedIn pages or accounts.

10.1 Data Accessed

  • Organization information for the Barlas Dijital Company Page
  • Aggregate metric data for published posts (impressions, clicks, engagement, follower counts, and similar statistics)
  • Comment and interaction data on posts
  • OAuth authentication credentials shared by page administrators for authorization purposes

10.2 Processing Purposes

  • Content planning and publishing on the Barlas Dijital Company Page
  • Performance reporting and content strategy improvement
  • Community management including comment and message tracking

10.3 Storage and Security

Data obtained through the LinkedIn API is stored only on the self-hosted n8n server under Barlas Dijital’s control, accessible only to authorized personnel. OAuth tokens are stored encrypted. Data not required for processing purposes is deleted or anonymized within a maximum of 24 months.

10.4 Third-Party User Rights

If you, as a LinkedIn user, interact with the Barlas Dijital Company Page (such as following, commenting, or sending messages), LinkedIn’s own Privacy Policy provides the primary framework for this data processing. To exercise your rights regarding data processed by Barlas Dijital in this context, you may use the contact channels in Section 13.

11. Cookies

We use cookies and similar technologies on our websites to improve user experience and conduct analysis:

  • Essential cookies: Required for site functionality, do not require user consent
  • Analytics cookies: Used to measure visitor behavior (subject to explicit consent)
  • Marketing cookies: Used for personalized content and advertising delivery (subject to explicit consent)

You can manage your cookie preferences through the cookie consent banner on our site or through your browser settings.

12. Data Subject Rights (KVKK Article 11)

Under KVKK Article 11, you may exercise the following rights by contacting Barlas Dijital:

  1. Learn whether your personal data is being processed
  2. Request information regarding processed data
  3. Learn the purpose of processing and whether the data is used in accordance with that purpose
  4. Know the third parties to whom data is transferred domestically or internationally
  5. Request correction if data is incomplete or processed inaccurately
  6. Request deletion or destruction under conditions outlined in KVKK Article 7
  7. Request notification of operations under items 5 and 6 to third parties to whom data is transferred
  8. Object to outcomes adversely affecting you that result solely from automated systems analysis
  9. Request compensation for damages incurred due to unlawful processing

13. How to Exercise Your Rights

To exercise these rights, you may submit your request:

  • By email: info@bdijital.com (using a registered electronic mail address or an email address registered in our system)
  • By post: Ekinoba Mah. Ayberk Sk. Elit Apt. No: 5, İç Kapı No: 33, Büyükçekmece/Istanbul, Turkey

Your request must include: name and surname, Turkish Republic ID number (or nationality and passport number for foreign nationals), notification address, contact email/phone if applicable, and a description of the matter.

Your request will be resolved free of charge within a maximum of 30 days. If a fee is set by the Turkish Personal Data Protection Authority, the relevant tariff will apply.

14. Data Security

Barlas Dijital takes appropriate technical and administrative measures to provide an adequate level of security for preventing unlawful processing of and access to personal data, and for ensuring its safekeeping. These measures include access permission controls, encryption, secure software development practices, confidentiality obligations, and periodic audits.

15. Changes to This Policy

Barlas Dijital may amend this Policy from time to time. Changes take effect upon publication on our website. The last update date is shown at the top of this page.

16. Contact

For any questions, requests, or notifications regarding this Policy or the processing of your personal data: