Privacy Notice

This privacy notice is issued under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to explain to visitors of urfatarihkulturadasi.com and of the Urfa Digital History and Culture Island how their personal data is processed.

1. Data controller

The data controller is the Governorship of Şanlıurfa (Paşabağı Mah. Cumhuriyet Cad. No: 77, Government House, Haliliye / Şanlıurfa). The site's software, technical operation and hosting are carried out by eCloud Software Technologies as data processor, on behalf of and under the instructions of the Governorship.

2. Personal data processed on the site

The site has no membership, forms, comments, newsletter, online ticketing or payment. No name, e-mail, phone number or similar information is requested. No cookies, analytics, advertising or social-media tracking tools are used.

When you visit the site, as on every web server, the following technical records (access logs) are created automatically:

• IP address
• Date and time of access
• Requested page or file, server response code and amount of data transferred
• Referring page address and browser / operating-system information

3. Purposes of processing

• Keeping the site secure; detecting attacks, misuse and errors
• Delivering the service continuously and correctly
• Responding to lawful requests from competent authorities

4. Method of collection and legal basis

Access records are collected automatically by the server when the site is visited. They are processed on the legal bases of Article 5(2)(ç) KVKK — compliance with a legal obligation of the controller (Law No. 5651) — and Article 5(2)(f) — the controller's legitimate interest in information security, provided this does not harm the fundamental rights and freedoms of the data subject.

5. Retention period

Access records are kept only for as long as the purposes above require and within the periods laid down by law; at the end of that period they are deleted automatically or anonymised.

6. Transfers

Personal data is never sold, rented or shared for marketing. It may be shared with competent judicial and administrative authorities only where there is a lawful request and to the extent permitted by law.

The site is hosted on a server in a data centre located in Germany (European Union). Access records are therefore stored on a server abroad; this transfer takes place solely for the provision of hosting and within the framework of the procedures set out in Article 9 KVKK.

7. Interactive areas on the Island

The depth cameras, radar and touch sensors used in the Island's interactive applications serve only to turn a visitor's momentary hand and body movement into imagery. No image or audio is recorded from these sensors, no data is stored, and no facial recognition or identification takes place.

QR codes on the kiosks open the corresponding pages of this site; QR use is not linked to any individual. Where security cameras record for the safety of the building, separate notice is given on site.

8. Your rights under Article 11 KVKK

• To learn whether your personal data is processed and, if so, to request information about it
• To learn the purpose of processing and whether data is used in line with that purpose
• To know the third parties to whom data is transferred in Türkiye or abroad
• To request rectification of incomplete or inaccurate data
• To request erasure or destruction under the conditions of Article 7 KVKK
• To request that rectification, erasure or destruction be notified to third parties to whom data was transferred
• To object to an adverse outcome arising from analysis exclusively by automated systems
• To claim compensation for damage arising from unlawful processing

9. How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests concerning your rights by a signed petition clearly stating your identity and request, sent to the Governorship of Şanlıurfa at the address above, by e-mail with a secure electronic signature to sanliurfa@icisleri.gov.tr, or via CİMER (cimer.gov.tr).

Applications are concluded free of charge within thirty days at the latest, depending on their nature; where the procedure entails an additional cost, the fee schedule set by the Personal Data Protection Board may apply. If your application is rejected, the reply is insufficient or no reply is given in time, you may lodge a complaint with the Personal Data Protection Board under Article 14 KVKK.

10. Changes

This notice may be updated to reflect changes in the law or on the site. The current version is always published on this page; the date of the last update appears at the bottom.