Data Protection Notice

Controller

Under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK), the controller is Benden Sonra Otizmle Yaşam Derneği (Life with Autism After Me Association), Düz Mah. Yıldız Sok. No: 10/301, Altınordu, Ordu, Türkiye. Email: bendensonrainfo@gmail.com. Telephone: +90 501 546 52 52.

The association decides why personal data on this website is processed and by what means. It has not appointed a data-protection officer, a United Kingdom representative, or a European Union representative.

The statute is at https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=6698&MevzuatTur=1&MevzuatTertip=5.

What this notice is

This notice is the disclosure required by KVKK Article 10: who we are, which data are processed, why, the legal basis, the recipients, how long data are kept, and your rights. The longer description of the website is in the privacy notice: https://bendensonra.org/en/legal/privacy-policy

Categories of data

The contact form contains your name, email address, telephone number if you add one, subject, and message. If the message mentions a diagnosis, school, or daily care, that can be health or family information. Health data is a special category under KVKK Article 6, as amended by Law No. 7499 of 2 March 2024, in force from 1 June 2024. It is special-category data under Article 9 of the UK GDPR, and it can be sensitive personal information under Cal. Civ. Code § 1798.140.

For the current visit only, the site stores a sessionStorage value named bsoyd-splash so the opening animation does not play again in that tab. It does not identify you. If an older localStorage value named bsoyd-locale is still present, the site deletes it.

When the Google map on every page loads, Google may receive your IP address. The association does not receive a copy of that technical data. There is no account, payment, newsletter, or analytics record.

Purposes and legal basis

Data are processed to read the message, to reply, and to keep a short record of what was asked and what was answered. They are not used for advertising, sale, or profiling.

KVKK Article 4 requires processing to be lawful and fair, accurate, for a specified and legitimate purpose, relevant and limited, and kept only as long as needed.

Under KVKK Article 5 the legal basis is your explicit consent, given by ticking the box and sending the email, together with the need to answer the request you made. Where health data needs its own consent, that same step is the consent. You may withdraw it by writing to us. Under the UK GDPR the same steps are consent in Article 6(1)(a) and, where it applies, legitimate interests in Article 6(1)(f). Special-category data rely on explicit consent in Article 9(2)(a).

How data are collected

The form does not post what you type to a server run by the association. Submit opens your own email program with the message already written. The association receives nothing unless you send that email.

If you send it, it arrives at bendensonrainfo@gmail.com, a Gmail inbox. The map loads with the page. Google’s handling is described at https://policies.google.com/privacy. Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) generally requires consent before information is stored on your device, unless it is strictly necessary. The map is not strictly necessary in order to read the pages. The Regulations are at https://www.legislation.gov.uk/uksi/2003/2426/contents.

Recipients and transfers

A message may be read by the board members who need it in order to reply, and by Google, because the inbox is Gmail and the map is Google’s. There is no sale and no sharing for advertising.

Those services may process information outside Türkiye, including in the United States and the European Economic Area. KVKK Article 9 allows a transfer abroad under an adequacy decision, an appropriate safeguard, or a statutory exception. Receiving the email you asked us to receive falls within the exception for a transfer needed to carry out your request. UK GDPR Articles 44 to 49 draw the same kind of line. The UK GDPR text is at https://www.legislation.gov.uk/eur/2016/679/contents. The map can let Google receive technical data before you write. We do not control Google’s later use of that technical data.

How long data are kept

An email is kept while it is needed to answer you and for a short record of the exchange, then deleted. There is no visitor database. You may ask for earlier deletion. We will delete it unless a copy must be kept to establish, exercise, or defend a legal claim.

Children

The site does not ask a child to create an account or to complete the form. If a message is about a child, a parent or caregiver should be the person who writes. The Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, limits collection from children under 13 in the United States. We do not knowingly collect personal information from a child under 13. If such a message reaches us, write to us and we will delete it.

Rights and how to apply

Türkiye. Under KVKK Article 11 you may ask whether we process your data, request information if we do, learn the purpose and the recipients in Türkiye or abroad, ask for correction, ask for erasure or destruction under Article 7, ask that recipients be told, object to a result against you produced solely by automated means, and claim compensation for unlawful processing. An application under Article 13 may be sent in writing to the address above or to bendensonrainfo@gmail.com. We reply within 30 days. You may complain to the Personal Data Protection Board: https://www.kvkk.gov.tr

United Kingdom. Under Articles 15 to 22 of the UK GDPR, read with the Data Protection Act 2018, you may ask for access, correction, erasure, restriction, and a copy of what you gave us, and you may object to processing based on legitimate interests. You may withdraw consent at any time. We reply within one month under Article 12(3), unless the request is complex. You may complain to the Information Commissioner’s Office: https://ico.org.uk. The Data Protection Act 2018 is at https://www.legislation.gov.uk/ukpga/2018/12/contents.

California. The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, is at Cal. Civ. Code §§ 1798.100 and following. Those duties attach to a business that meets the thresholds in § 1798.140. The association is a small organization in Türkiye and does not believe that it meets them. Even so, anyone may ask to know the personal information we hold (§§ 1798.100 and 1798.110), to delete it (§ 1798.105), to correct it (§ 1798.106), to be told that we do not sell or share it (§ 1798.115), to opt out of a sale or share, which we do not do (§ 1798.120), and to limit use of sensitive personal information to the reply you asked for (§ 1798.121). Where we answer under that statute, we do so within 45 days, as § 1798.130 provides. The California Privacy Protection Agency is at https://cppa.ca.gov.

Changes

If the website or the law changes, we will update this notice and the date at the top. This version is dated 26 October 2026.