Privacy and cookie policy
This page explains what data umutsevimcan.com processes, why, and what you can do about it.
Last updated: 10 August 2026
Data controller
This site is operated by Umut Sevimcan. You can reach me directly at the email address below about anything concerning your data. The site is hosted on Hostinger infrastructure, in a Frankfurt (Germany) data centre.
Why data is processed
Three purposes: replying to messages sent through the contact form, remembering your appearance preferences, and understanding how visits are distributed. There is no advertising, no profiling, and no sale of data.
What data is processed
If you use the contact form: your name, email address, subject and message. To prevent abuse your IP address is held briefly in a rate-limit counter during submission; it is not stored with the message. When you record a cookie decision: a random record identifier, the categories you chose, the date and the page language. If you consent to analytics: page addresses, referring address, approximate location (country/city level), device and browser information.
Who the data is shared with
If you consent to analytics, measurement data is processed by Google Ireland Limited and stored on Google infrastructure, which may involve transfers outside the European Union. Hosting is provided by Hostinger. Messages sent through the contact form are delivered to me by email only. No data is shared with any other third party.
How long data is kept
Contact messages are deleted within a reasonable period after the exchange ends; you can ask for deletion at any time. Cookie consent records are kept for one year and expired ones are removed automatically. The retention period for Google Analytics data is set by Google and is fourteen months by default.
Your rights
Under GDPR and Turkey's KVKK you have the right to access your data, have inaccurate data corrected, request erasure, object to processing, receive your data in a portable format, and claim compensation if your rights are breached. You do not have to give a reason for any of these — writing to the address below is enough.
Right to complain
If I do not answer your request within thirty days, or you find the answer inadequate, you may complain to your national data protection authority. In Turkey this is the Personal Data Protection Authority (KVKK).
Cookies used
The table below lists every cookie this site sets. Those marked "necessary" are required for the site to work and are not subject to consent; those marked "consent-based" are only set if you accept. The whole site stays available if you refuse.
| Name | Purpose | Provider | Duration | Category |
|---|---|---|---|---|
| umut-sevimcan-session | Identifies your session; form submission security depends on it. | This site | Session | Necessary |
| XSRF-TOKEN | Protects form submissions against forged requests. | This site | Session | Necessary |
| onay | Remembers your cookie decision; without it you would be asked on every page. | This site | 1 year | Necessary |
| tercihler | Remembers your theme, text size and accessibility preferences. | This site | 1 year | Consent-based |
| _ga | Distinguishes visitors from one another (Google Analytics). | 2 years | Consent-based | |
| _ga_D44W3VTKM3 | Holds session state (Google Analytics). | 2 years | Consent-based |
Google Analytics
I use Google Analytics 4 to understand how visits are distributed. The data collected is limited to which pages were viewed, where the visit came from, approximate location and device information. Your name, email address or anything else that identifies you directly is never sent to Analytics.
The measurement tag is NOT loaded into your browser at all until you accept cookies — no request goes to Google unless you consent. This is the setup Google calls "basic consent mode".
Withdrawing your consent
You can change your decision at any time; withdrawing has to be as easy as giving. The link below reopens your cookie preferences. When you withdraw, analytics cookies are deleted and the measurement tag is not loaded again.
Contact
Write to me directly about any request concerning your data. I will resolve it within thirty days at the latest.