Personal Data Protection Notice
1. Data controller
Under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is İnsanlığa Karşı Suçlar ve Soykırımla Mücadele Derneği (S.O.S.der). Our full identity and contact details are on the Legal information page.
2. What we process, why, and on what legal basis
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, e-mail, phone, message; technically IP address | Replying to your request | KVKK art. 5/2-c and 5/2-f | Message 2 years; IP 6 months |
| Newsletter | E-mail address, consent date and IP address | Sending campaigns and announcements | Explicit consent (KVKK art. 5/1) and commercial message consent (Law 6563 art. 6) | Until you withdraw consent; withdrawal record 3 years |
| Security logs | IP address, browser data, login attempts, error logs | Information security, abuse prevention | KVKK art. 5/2-f (legitimate interest) | 90 days – 1 year (see table below) |
| Volunteer application | Name, e-mail, phone, city, area of interest, message; technically IP address | Assessing your application and contacting you | KVKK art. 5/2-c (pre-contractual steps at your request) and 5/2-f | Application 2 years; IP 6 months |
3. How we collect data
Your data is collected electronically from you through forms on the site, and automatically through server logs and (only with your consent) cookies.
4. Recipients
| Recipient | Country | Purpose |
|---|---|---|
| Güzel Hosting | - | Hosting |
Your personal data is not transferred to third parties other than the recipients listed above.
5. Retention periods
The periods below are enforced automatically by the site software.
| Record | Period |
|---|---|
| Login attempts | deleted after 3 months |
| Administrator activity logs | deleted after 1 year |
| Not-found page logs | deleted after 6 months |
| IP/browser data in contact messages | cleared after 6 months |
| Contact messages | deleted after 2 years |
| IP/browser data in applications | cleared after 6 months |
| Volunteer applications | deleted after 2 years |
| Raw visit statistics records | deleted after 3 months |
6. Your rights and how to apply
Under Article 11 of the KVKK you have the right to: (a) learn whether your personal data is processed; (b) request information if it has been processed; (c) learn the purpose of processing and whether it is used accordingly; (ç) know the third parties to whom it is transferred in Türkiye or abroad; (d) request correction of incomplete or inaccurate data; (e) request erasure or destruction under Article 7; (f) request that (d) and (e) be notified to third parties to whom the data was transferred; (g) object to a result against you arising exclusively from automated analysis; (ğ) claim compensation for damage due to unlawful processing.
You may apply in writing (wet-signed letter to the address on our Legal information page), via registered e-mail (KEP), with a secure electronic or mobile signature, or from an e-mail address previously registered with us to info@sosder.com. We reply free of charge within 30 days at the latest (KVKK art. 13). If your application is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application (KVKK art. 14). Visitors from the EU also have the rights under GDPR art. 15–22.