Who to contact
The controller is Muhammed Şamil Yiğit, trading as 4MHAVEN, responsible for this portfolio and its project enquiries. Contact: 2626muhammed@gmail.com. Postal address: Çünür Mah. 5419 Sokak No:16, Merkez / Isparta, Türkiye.
What this website processes
When you visit, network information such as your IP address, requested page, browser information and request time is transmitted to the hosting and security infrastructure to deliver and protect the website. The site runs on OpenAI Sites with Cloudflare infrastructure. We do not run advertising pixels, analytics, fingerprinting or embedded social media players.
The project brief tool processes the name, email, selected service and project description you enter in your browser memory. Submitting the form creates a local brief; it does not send those fields to our server or email us. Copying places the brief on your clipboard; downloading saves a text file to your device. Avoid sensitive personal data and confidential third-party information.
When you email us or choose to share a brief through Fiverr, we receive the information you send, your contact details and project correspondence. Fiverr and the email provider process information under their own notices. Following a Fiverr link leaves this website; no Fiverr embed loads here.
Purposes and legal grounds
Delivery, reliability and proportionate security of the portfolio rely on legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f), subject to balancing your rights). Responding to a project request and preparing or performing a contract rely on requested pre-contractual steps or contract performance (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). Applicable recordkeeping obligations may require processing under GDPR Art. 6(1)(c) and KVKK Art. 5(2)(ç); establishing or defending claims may rely on KVKK Art. 5(2)(e) and GDPR Art. 6(1)(f). We do not subscribe you to marketing or sell/share your data for targeted advertising.
Recipients, international processing and retention
Website delivery involves OpenAI Sites and Cloudflare; enquiries sent by email involve our email provider (Google/Gmail), and Fiverr enquiries involve Fiverr. Relevant infrastructure or support may process information outside Türkiye or your country. OpenAI’s Sites Data Processing Addendum covers hosted data; its EEA/Swiss provisions route processing through OpenAI Ireland and provide for safeguards for onward transfers. This does not, by itself, establish compliance with Türkiye’s KVKK Art. 9. A storage acknowledgement is not consent to international transfers. Contact us for information on safeguards applicable to your data.
The brief remains in the open tab and is not saved to our database; a refresh or closing the page clears the site’s in-memory copy. Files, clipboard content and messages you share remain until you or their recipient delete them. The privacy acknowledgement expires after 180 days. Hosting/security log retention is controlled by the hosting providers; this site does not set a separate log retention period. We keep project correspondence only while needed for the enquiry, agreed work, applicable legal obligations or claims, and review it for deletion when those purposes end. Contact us for the retention applicable to your specific correspondence.
Your rights and requests
Depending on applicable law, you may request access and a copy, correction, deletion, restriction, portability, object to processing (including legitimate-interest processing), and withdraw any consent without affecting earlier lawful processing. Under KVKK Art. 11 you may also ask whether data is processed, its purposes and recipients at home or abroad, request notification of correction/deletion to recipients, object to an adverse result from exclusively automated analysis and seek compensation for unlawful processing. We do not make automated decisions with legal or similarly significant effects.
Send a request to the email or postal address above. We ask only for information proportionate to verifying the request. KVKK requests are handled as soon as possible and within 30 days; GDPR requests normally within one month, with legally permitted extensions explained where applicable. You may complain to the competent supervisory authority, including Türkiye’s KVKK or your relevant European authority. The site is a professional portfolio and is not directed to children.