PRIVACY / GDPR

Your privacy.

Last updated: November 3, 2026

1. Data controller and contact

The data controller for this website is Salih YOLUSEVER (SY Digital Media). For privacy and personal data requests: Get in touch by email ↗. Business and correspondence address:

2. Tracking and external resources

This site uses no analytics, advertising pixels, behavioral tracking, fingerprinting or third-party cookies. DM Sans, images and other files are served locally. The site loads no Google Fonts service, social SDKs or embedded video players. Public pages set no application cookies and store no tracking data. “Got it” saves only the date when the cookie notice should reappear, in this browser’s local storage. The record stays on your device and the notice reappears after 180 days. Reopen it through “Cookie notice” in the footer or clear this site’s browser data to delete the record. No automated decision-making or profiling takes place.

3. Hosting and technical data

This site is designed for Hostinger hosting. To deliver pages securely, the server may process technical data such as the IP address, request time, requested resource, HTTP status and browser. The legal basis is our legitimate interest in providing a secure and functional website under GDPR Article 6(1)(f).

The application keeps no general visitor access log. The host’s access, error and security logs depend on its settings. Retention periods, the contracting entity, data center, subprocessors and any international transfer arrangements for this account still need verification against the hosting agreement before publication. A data processing agreement under Article 28 and, where applicable, safeguards under Article 44 onward must be in place. Hostinger privacy information ↗

4. MediaKit and the essential session cookie

The first-party SY_MEDIKIT session cookie is used only in MediaKit. It contains a random session identifier. The password is not stored in it. It authenticates access and helps prevent forged requests. The cookie uses HttpOnly and SameSite=Strict, plus Secure over HTTPS. It is intended to expire when you close the browser, which may restore sessions. Access ends after at most 30 minutes or on sign-out. The hosting provider’s session cleanup removes residual server-side session data. This cookie is technically required for access and is used solely for that purpose.

For sign-in attempts, the server temporarily stores a keyed hash derived from the IP address, the attempt count and a 15-minute window. The raw IP address is not recorded in this file. Expired entries are removed on the next attempt and may remain if no further attempts occur. The purpose is to prevent unauthorized access and brute-force attempts under Article 6(1)(f). Five failed attempts per IP within 15 minutes trigger a temporary restriction.

5. Email contact

The email button opens your email app. The address is generated on interaction to deter simple automated harvesting. If you write to us, we process your name, email address, message and attachments to respond. The basis is Article 6(1)(b) for contractual or pre-contractual requests and Article 6(1)(f) for our legitimate interest in answering other correspondence. Messages may be processed by the domain’s email service provider. The controller must verify the provider, its processing arrangements and any safeguards for transfers outside the EU.

Messages are deleted when the request and any follow-up are complete. Where contractual, accounting, legal claims or statutory retention needs apply, access is restricted for the required period. We do not use these data to build advertising lists.

6. Social media and external links

Instagram, TikTok, YouTube and other external sites are provided as links. Your browser contacts them when you follow a link, without sending referrer information. On the external site, the operator may receive data such as your IP address. Its terms govern cookies, tracking and any transfers outside the EU. The external operator is responsible for its own content and processing. We remain responsible for processing on this site.

7. Your rights

Where applicable, you have the right to access (Article 15), rectify (16), erase (17), restrict processing (18) and receive portable data (20). You may object on grounds relating to your situation to processing based on legitimate interests (21). If processing relies on consent, you can withdraw it for future processing. Use the email contact above. If identity verification is needed, we request only the necessary information. Requests are normally answered within one month, subject to statutory extensions.

You can also complain to the data protection authority in the EU country where you live or work, or where you believe the infringement occurred (Article 77). In France: CNIL ↗. Official GDPR text ↗.

8. Data provision and recipients

Technical connection data are required to deliver the site. Sending email and using MediaKit are optional. The hosting provider may access technical data for its duties, the email provider may access correspondence data, and competent authorities may receive data where required. Personal data are not sold.