Privacy Policy

Privacy Policy
Last Updated: October 11, 2026
1. Introduction
Welcome to alperxalp.com (the “Website”).
This Website is owned and operated by Alper Alp (“I,” “me,” or “my”), an independent professional based in Ankara, Türkiye.
I respect the privacy of individuals who visit this Website, contact me, or interact with its content and services.
This Privacy Policy explains how personal information is collected, processed, stored, disclosed, transferred, and protected in connection with the Website.
Personal data is handled in accordance with applicable data protection legislation, including:

• Türkiye's Personal Data Protection Law No. 6698 (“KVKK”).

• The European Union General Data Protection Regulation (“GDPR”), where applicable.

• Other mandatory data protection laws to the extent they apply to the relevant processing activities.

The purpose of this Privacy Policy is to provide transparent information about personal data processing and the rights available to individuals.
Where consent is required by law, it will be requested separately. Merely accessing the Website does not constitute consent to optional personal data processing, marketing communications, or non-essential cookies.
2. Website Owner and Data Controller
The primary data controller for personal information processed through this Website is:
Alper Alp
Ankara, Türkiye
Website: https://alperxalp.com
Email: hello@alperxalp.com
As the Website's owner, I determine the purposes and relevant means of processing personal information collected for my personal brand, professional communications, and related activities.
2.1. Relationship with Professional Companies
I am the founder of two separate business entities:
Tinkwyz Danışmanlık Çözümleri A.Ş.
A company established in Türkiye, providing consulting and professional services in areas including business, strategy, management, leadership, organizational development, and technology.
Multitasking Ninja LLC
A limited liability company established in Wyoming, United States, operating in digital products, digital entrepreneurship, and related commercial activities.
Both companies are legally distinct from me as an individual and from each other.
This Website serves primarily as my personal and professional online presence. References to these companies are provided to describe my professional background, entrepreneurial activities, and business interests.
Their inclusion on the Website does not automatically make either company a joint data controller, contractual party, or recipient of visitor information.
2.2. Inquiries Relating to These Companies
Where a visitor explicitly requests information about services, products, or business activities conducted by Tinkwyz Danışmanlık Çözümleri A.Ş. or Multitasking Ninja LLC, relevant personal information may be shared with the appropriate entity when necessary and supported by a valid legal basis.
Before any such disclosure, applicable data protection requirements, including transparency, purpose limitation, data minimization, and international transfer restrictions, must be satisfied.
Following a lawful transfer, the receiving company may act as an independent data controller for its own processing activities.
Where a separate entity determines the purposes and means of processing, its applicable privacy notice and contractual arrangements govern that processing.
Nothing in this Privacy Policy is intended to merge the legal responsibilities of these separate entities.
3. Scope of This Privacy Policy
This Privacy Policy applies to personal information processed in connection with:

• Visiting and browsing alperxalp.com.

• Using its contact forms.

• Sending professional or general inquiries.

• Requesting information about my expertise or services.

• Requesting meetings or professional discussions, where scheduling features are available.

• Communicating with me through the Website.

• Interacting with Website features that process personal information.

This Privacy Policy does not automatically apply to independently operated websites, products, or services of Tinkwyz Danışmanlık Çözümleri A.Ş., Multitasking Ninja LLC, or unrelated third parties.
Those activities may be governed by separate privacy notices.
4. Categories of Personal Data
Depending on how visitors interact with the Website, the following categories of information may be processed.
4.1. Identification and Contact Information
Information voluntarily submitted through contact forms, email, or meeting requests may include:

• First and last name.

• Email address.

• Telephone number, if voluntarily provided.

• Company or organization name.

• Professional title or role.

• Country or location, if voluntarily provided.

• Preferred method of communication.

Only information reasonably necessary for the relevant purpose should be requested.
4.2. Communication and Professional Inquiry Information
This category may include:

• Subject and content of messages.

• Professional interests.

• Areas of expertise or services requested.

• Information provided about an organization or business challenge.

• Meeting requests and scheduling preferences.

• Previous correspondence relating to an inquiry.

• Documents or additional information voluntarily submitted.

Visitors should avoid providing information that is unnecessary for the inquiry.
4.3. Technical and Usage Information
The Website and its infrastructure providers may process technical information, including:

• IP address.

• Browser and browser version.

• Device type.

• Operating system.

• Approximate location derived from technical information.

• Language and device settings.

• Date and time of access.

• Requested pages.

• Referring website or source.

• Technical diagnostic and security information.

• Cookie identifiers and consent preferences.

• Website interaction information where the relevant tools are enabled.

The extent of this processing depends on the Website's actual configuration and the services used.
4.4. Special Categories of Personal Data
The Website is not designed to collect sensitive or special categories of personal data.
Visitors are requested not to submit information concerning health, biometric characteristics, religious beliefs, political opinions, criminal records, or other sensitive matters unless specifically necessary and legally authorized.
If such information is submitted without being requested, it will not be used for unrelated purposes and will be handled in accordance with applicable law.
Where retention is unnecessary or unlawful, appropriate deletion or other legally required action will be taken.
5. Methods of Collection
Personal data may be collected through:
Direct Collection
Information voluntarily supplied through Website forms, email communications, and meeting requests.
Automated Technical Collection
Technical information processed when visitors access the Website, including security logs, browser information, and applicable cookies.
Website Service Providers
Information processed or transmitted through Wix and authorized services necessary to operate the Website.
Professional Communications
Information received through correspondence initiated by visitors regarding professional collaboration or business inquiries.
Personal information will not be collected through unrelated channels merely because an individual visits the Website.
6. Purposes and Legal Bases of Processing
Personal data is processed for specified, explicit, and legitimate purposes.
The applicable legal basis depends on the nature of the processing activity and the relevant legislation.
6.1. Website Operation and Security
Purpose: Maintaining Website functionality, protecting against unauthorized access, detecting misuse, and supporting technical stability.
Potential legal basis: Legitimate interests, compliance with legal obligations, or another applicable basis under KVKK Article 5(2) and, where applicable, GDPR Article 6.
Reliance on legitimate interests is subject to the legally required assessment of individual rights and freedoms.
6.2. Responding to Inquiries
Purpose: Receiving, reviewing, and responding to messages, questions, and professional inquiries.
Potential legal basis: Legitimate interests or, where relevant, processing necessary for establishing or performing a contractual relationship or taking requested pre-contractual steps.
6.3. Professional Communications and Meetings
Purpose: Arranging requested discussions, maintaining relevant correspondence, and evaluating potential collaborations.
Potential legal basis: Legitimate interests, contractual necessity, or another applicable legal basis depending on the circumstances.
6.4. Professional Engagements
Purpose: Evaluating service requests, preparing proposals, communicating about potential engagements, and supporting agreed professional activities.
Potential legal basis: Contractual necessity, legitimate interests, or compliance with applicable legal obligations.
Where services are provided through another legal entity, that entity's own privacy notice and processing arrangements may apply.
6.5. Website Analytics and Improvement
Purpose: Understanding Website usage, identifying technical issues, evaluating performance, and improving the visitor experience.
Potential legal basis: Consent where required for analytics or similar tracking technologies, or another lawful basis where expressly permitted by applicable legislation.
Non-essential tracking technologies requiring consent will not be intentionally activated before valid consent is obtained.
6.6. Legal Compliance and Protection of Rights
Purpose: Meeting legal obligations, responding to lawful requests, maintaining necessary records, and establishing, exercising, or defending legal claims.
Potential legal basis: Compliance with legal obligations, establishment or protection of legal rights, or another relevant statutory basis.
7. Data Minimization and Purpose Limitation
Personal information is limited to what is reasonably necessary for the stated purposes.
Information collected for one purpose will not be used for an incompatible purpose without an appropriate legal basis.
Access to personal information should be limited to persons and service providers who require it for authorized activities.
Additional processing will be evaluated against applicable legal requirements.
8. Sharing and Disclosure of Personal Information
Personal information may be disclosed to the following categories of recipients where necessary and legally permitted.
8.1. Wix and Authorized Technology Providers
The Website is built and hosted using Wix.
Wix and its authorized service providers may process information required for hosting, security, forms, communications, analytics where enabled, and other Website functions.
Wix generally acts as a data processor for visitor information it handles on behalf of Website owners, subject to its applicable contractual arrangements.
Wix may also act independently in relation to processing activities for which it determines its own purposes and means.
Further information is available in the Wix Privacy Policy.
8.2. Communication and Scheduling Providers
Where necessary, information may be processed by authorized email, communication, or scheduling providers to respond to inquiries or arrange requested meetings.
8.3. Tinkwyz Danışmanlık Çözümleri A.Ş.
Information may be disclosed to Tinkwyz where the visitor's inquiry specifically concerns relevant company services and such disclosure is necessary and lawful.
8.4. Multitasking Ninja LLC
Information may be disclosed to Multitasking Ninja LLC where the visitor's inquiry specifically concerns its activities and the disclosure satisfies applicable data protection requirements.
Because Multitasking Ninja LLC is established in the United States, disclosure of personal data to that company may constitute an international transfer requiring additional legal safeguards.
No routine transfer to Multitasking Ninja LLC is implied merely by mentioning the company on this Website.
8.5. Professional Advisers
Information may be shared with legal, accounting, technical, or other professional advisers where their involvement is necessary and supported by a valid legal basis.
8.6. Competent Authorities
Personal information may be disclosed where required by applicable law, a lawful regulatory request, or a valid legal process.
8.7. Sale of Personal Information
I do not operate this Website for the purpose of selling visitor personal information or commercializing contact-form submissions through data brokers.
Any third-party advertising, analytics, or data-sharing arrangements remain subject to applicable legal definitions, notice requirements, and privacy rights.
9. International Data Transfers
The Website uses Wix, an internationally operating technology provider.
According to Wix's published data processing documentation, information processed through its services may be transferred to or processed in jurisdictions outside Türkiye, including Israel and other countries where Wix or its authorized service providers operate.
International processing may also arise from email, communication, scheduling, or other third-party services.
Where personal data is transferred from Türkiye to another country, the transfer must comply with Article 9 of KVKK and the applicable secondary legislation.
Depending on the circumstances, a lawful transfer mechanism may involve an applicable adequacy decision, appropriate safeguards such as a legally valid standard contract, or another transfer condition expressly permitted by law.
Where required, the necessary contractual, technical, organizational, or regulatory requirements must be satisfied before the relevant transfer takes place.
The existence of safeguards under the GDPR does not automatically establish compliance with the separate international transfer requirements of KVKK.
Where the GDPR applies, international transfers will also be subject to its relevant provisions, including Chapter V.
Further information about the relevant transfer arrangements may be requested through hello@alperxalp.com, subject to applicable disclosure limitations.
10. Cookies and Similar Technologies
The Website may use cookies and similar technologies for essential operations, security, preferences, and optional functionality.
Wix uses certain technologies to provide its core services.
Additional technologies may be introduced through integrations and applications.
Where consent is legally required for non-essential cookies or tracking technologies, such technologies must remain disabled until the relevant permission has been obtained.
Visitors may manage applicable preferences through the Website's consent management mechanism.
Detailed information is available in the Cookie Policy.
11. Personal Data Retention
Personal data will not be retained longer than necessary for the purposes for which it was collected, unless continued retention is required or permitted by applicable law.
Retention is determined according to:

• The purpose of the processing.

• The nature and sensitivity of the information.

• Whether the relevant inquiry or professional communication remains active.

• The existence of contractual or legal obligations.

• Applicable statutory retention periods.

• The necessity of establishing, exercising, or defending legal claims.

• The operation of relevant provider systems and backup processes.

As a proposed general retention standard, ordinary inquiries that do not lead to a professional engagement should be reviewed for deletion or anonymization no later than 24 months after the last substantive communication, unless continued retention is justified by a valid legal basis.
Records relating to actual professional engagements, legal obligations, or disputes may require different retention periods.
Technical logs, consent records, and cookies may have separate retention periods based on their functions and applicable legal requirements.
When retention is no longer justified, information will be deleted, destroyed, or anonymized as required by applicable law.
Deletion from active systems may not immediately eliminate copies retained in legally required records or service-provider backup systems.
The stated retention approach must be implemented in the actual systems used to store the information.
12. Personal Data Security
Appropriate technical and organizational safeguards are required to protect personal information against unauthorized access, unlawful processing, accidental loss, alteration, and unauthorized disclosure.
Protection of Website information involves both the security capabilities of the relevant service providers and the responsible configuration and administration of the Website.
Security considerations include appropriate access controls, account protection, secure communications, data minimization, and restrictions on unauthorized disclosure.
No electronic storage or internet transmission method can guarantee absolute security.
This statement does not limit or exclude mandatory data security obligations.
Where a personal data breach occurs, the applicable investigation, mitigation, notification, and reporting requirements will be followed.
13. Rights Under Turkish Data Protection Law
Individuals whose personal data is processed may exercise the rights provided under Article 11 of KVKK, subject to the conditions of applicable law.
These rights include:

1. Learning whether their personal data is being processed.

2. Requesting information about the processing.

3. Learning the purposes of processing and whether the information is used accordingly.

4. Learning the third parties to whom personal data has been transferred.

5. Requesting correction of incomplete or inaccurate information.

6. Requesting deletion or destruction where the legal requirements are met.

7. Requesting notification of relevant correction or deletion operations to third parties to whom the information was transferred.

8. Objecting to adverse results arising from analysis conducted exclusively through automated systems.

9. Requesting compensation for damages arising from unlawful processing.

Exercising Your Rights
For questions about your personal information or assistance with a data protection request, contact:
hello@alperxalp.com
Formal applications under KVKK must comply with the legally prescribed application procedures.
Depending on the circumstances, legally recognized methods include written applications, registered electronic mail (KEP), secure electronic signatures, mobile signatures, email addresses previously communicated to and recorded by the data controller, or other methods recognized by the competent authority.
The contact email above is available for privacy communications; whether an ordinary email constitutes a valid formal application depends on the applicable legal requirements.
Necessary information concerning legally recognized submission channels can be requested through the contact address.
Valid applications will be assessed and answered as soon as reasonably possible and, where KVKK Article 13 applies, within the legally prescribed maximum period of 30 days.
Reasonable identity verification may be requested where necessary to prevent unauthorized disclosure.
Individuals may exercise their statutory complaint rights before the Turkish Personal Data Protection Authority in accordance with applicable procedures and deadlines.
14. Additional Rights Where the GDPR Applies
Where the GDPR applies to the relevant processing, individuals may have additional rights, including:

• Access to personal information.

• Rectification of inaccurate information.

• Erasure under applicable conditions.

• Restriction of processing.

• Objection to certain processing activities.

• Data portability where applicable.

• Withdrawal of consent.

• Protection against certain decisions based solely on automated processing.

• Submission of complaints to a competent supervisory authority.

These rights are subject to applicable legal conditions, exceptions, and limitations.
Withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal.
Requests may be sent to hello@alperxalp.com.
15. Automated Decision-Making and Profiling
The Website is primarily intended to provide information about my professional background, expertise, and activities.
It is not intended to make decisions about visitors that produce legal or similarly significant effects based solely on automated processing.
If functionality involving legally relevant automated decision-making is introduced, applicable transparency and data protection requirements must be addressed before implementation.
16. Marketing Communications
Submitting a contact form, sending an inquiry, or requesting a meeting does not automatically constitute consent to receive advertising or promotional communications.
Where marketing communications are introduced, any required consent or other lawful basis will be established separately.
Recipients will be provided with legally required methods for withdrawing consent or objecting to marketing communications.
Personal information submitted for an inquiry will not automatically be added to an unrelated marketing list.
17. Children's Privacy
The Website is intended for general professional, educational, and informational purposes.
It is not specifically designed for children or directed toward collecting personal information from children.
Where personal information concerning a child is identified and the processing lacks a valid legal basis, appropriate measures will be taken in accordance with applicable law.
18. Third-Party Websites and External Links
The Website may contain links to external websites, including professional networks, educational institutions, technology platforms, and the websites of Tinkwyz Danışmanlık Çözümleri A.Ş. and Multitasking Ninja LLC.
These websites may operate under separate privacy notices and terms.
This Privacy Policy does not govern personal information independently collected by third parties through their own services.
Visitors are encouraged to review the relevant policies before providing information to external services.
19. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in legal requirements, Website functionality, service providers, or personal data processing activities.
The updated version will be published on this page with a revised date.
Where required by applicable law, additional notice or renewed consent will be provided.
Changes will not retroactively establish a lawful basis for processing that previously lacked one.
20. Contact Information
For questions, concerns, or requests regarding personal data protection:
Data Controller: Alper Alp
Location: Ankara, Türkiye
Email: hello@alperxalp.com
Website: https://alperxalp.com