- Home
- Privacy Notice
Privacy Notice
How the Erzurum Aksu website processes personal data: purposes, recipients, retention periods and your rights under Turkish data protection law (KVKK).
1. Data controller
This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. The data controller for personal data processed through this website, which carries the Erzurum Aksu brand, is the Erzurum Metropolitan Municipality (Yakutiye / Erzurum, Türkiye).
2. Which personal data is processed?
Only the following personal data is processed through this site:
Contact form: full name, e-mail address, telephone number (optional), the department you select, subject, message text and any file you attach.
Server logs: when you access the site, your IP address, the date and time of access, the requested page and browser information are recorded in server logs for security and technical operation.
Preferences: a technical cookie remembers the site language you choose; the fact that you dismissed the cookie notice is kept in your browser's local storage, not in a cookie. See the Cookie Policy for details.
The site offers no membership or account creation, collects no payment details and uses no advertising or analytics tracking cookies.
3. Purposes of processing
Forwarding the order, enquiry, suggestion and complaint requests you submit through the contact form to the relevant department and responding to them,
Operating the site securely, without interruption and in compliance with the law; detecting abuse and attack attempts,
Fulfilling obligations arising from legislation, in particular Law No. 5651,
Providing information to authorised public bodies upon request.
4. Legal grounds
Your personal data is processed on the following legal grounds listed in Article 5 of the KVKK:
For contact form data, the explicit consent you give when submitting the form (Art. 5/1) and the necessity of processing to fulfil your request (Art. 5/2-c and e),
For server logs, the controller's compliance with a legal obligation (Art. 5/2-ç) and its legitimate interest, provided that your fundamental rights and freedoms are not harmed (Art. 5/2-f).
5. Who receives your data?
Your personal data is shared only with the relevant departments of the Municipality, limited to the purposes above. Where required by law or requested by competent authorities, it may be shared with judicial and administrative bodies. The site is hosted on servers under the Municipality's control; your data is not transferred abroad and is not given to third parties for commercial purposes.
6. Method of collection
Your personal data is collected electronically and by automated means when you fill in the contact form and when you visit the site.
7. Retention period
Contact form messages are kept for at most one year after your request is resolved and are then deleted; the IP address and browser information in closed messages are anonymised within 90 days at the latest. Server logs are kept for the period required by legislation. These periods are applied in line with the Municipality's personal data retention and disposal policy.
8. Your rights
Under Article 11 of the KVKK you may apply to the data controller to:
learn whether your personal data is being processed,
request information if it has been processed,
learn the purpose of processing and whether the data is used in line with that purpose,
know the third parties, in Türkiye or abroad, to whom the data is transferred,
request correction of incomplete or inaccurate data,
request deletion or destruction under the conditions of Article 7 of the KVKK,
request that corrections, deletions and destructions be notified to third parties to whom the data was transferred,
object to a result against you arising from analysis exclusively by automated systems,
claim compensation for damage caused by unlawful processing.
9. How to apply
You may submit requests regarding your rights in writing, together with documents identifying you, to Erzurum Metropolitan Municipality, Yakutiye / Erzurum, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or through the Municipality's official contact channels. Your application is concluded free of charge as soon as possible and within thirty days at the latest.
10. Updates
This notice was published on 8 September 2026. It is updated when legislation or our processing activities change; the current version is always available on this page.
