Personal Data Processing Notice

Controller and scope

SCGENCO is a personal brand operated by Sabri Caner Genco. This text does not assert corporate incorporation, registration or certification.

For operations where he determines the purposes and means of inquiry/contact data received, this draft identifies Sabri Caner Genco as controller. Hosting and external provider roles, agreements and processing arrangements require separate confirmation.

Contact: s.canergenco@gmail.com for privacy questions. A formal request address and any registered electronic mail channel have not been confirmed; this draft does not provide a completed formal request procedure. Do not send unnecessary identity documents or sensitive data.

Data and collection methods

Contact and project forms prepare a browser draft from your name, email and voluntary project descriptions. Preparation, copying or JSON import does not send anything to SCGENCO. If you choose to send, your email app completes delivery; you attach files yourself.

Voluntary submissions may include name/email, business communication, project goals, budget/timing expectations, brand information, images/logos, stories and lyrics. Local file selection and draft editing are not server uploads. Real appointment/customer or health data is not requested for the demo.

Purposes and operation-specific legal grounds

This mapping is a legal-assessment draft; necessity and applicability must be confirmed for each purpose. Information, explicit consent and acceptance of service terms are distinct. Reading this page is not blanket consent.

Inquiry and quotation: Article 5(2)(c) may be considered for necessary contact/project information when directly related to establishing a contract; not every free-text detail automatically qualifies.
An agreed project: contract performance for necessary delivery/communication; Article 5(2)(ç) for mandatory records only where a specific legal obligation exists. Records needed for legal claims require a separate Article 5(2)(e) assessment.
Hosting security and functional session information: Article 5(2)(f) may be relevant after assessing the purpose, necessity and rights balance, not as an automatic basis for all logs. Theme/local draft choice is not general processing consent.
Optional portfolio use, marketing or special-category data require separate assessment. The site has no marketing subscription and requests no special-category data. Where needed, these purposes must not begin without separate, specific and withdrawable explicit consent.

Recipients and transfers

When you initiate sending, your email provider and the recipient’s Gmail may process the message. WhatsApp/LinkedIn/GitHub links navigate to those services; forms are not automatically sent to them. Hosting processes site requests. Sharing with project/production partners is not assumed without separate information and the required legal conditions.

The owner reports selecting Cloudflare Free for hosting. Actual deployment and account settings were not verified in this audit. Site/media requests may disclose IP and HTTP information to infrastructure. Security logs, cookies, subprocessors, data locations and retention must be confirmed before publication.

Potential international transfers must be assessed against actual Gmail, Cloudflare and other service flows. The applicable Article 9 mechanism, safeguards and notifications have not been verified. A general consent sentence is not claimed to establish lawful transfers.

Retention and safeguards

Browser memory is not a server backup. There is no automatic localStorage expiry; sessionStorage usually follows the tab session, which browser restoration may retain. You control downloads. A purpose/legal-requirement based retention/deletion schedule for received emails and any service records has not been confirmed; no duration is invented.

Data minimization, access restrictions and secure device/email use are necessary. Absolute security or end-to-end encrypted email delivery is not guaranteed.

Data subject rights

You may address applicable Article 11 rights to the controller:

Learn whether data is processed, obtain information and inquire about purposes and use consistent with them.
Learn domestic/international recipients and request correction of incomplete/inaccurate data.
Request erasure/destruction where legal conditions apply and notification of correction/erasure to recipients.
Object to adverse outcomes based solely on automated analysis and seek compensation for damage from unlawful processing.

Requests and outstanding confirmation

Legally valid written/electronic methods, proportionate identity verification and response procedures must be completed with legal counsel. Ordinary email is not presented as a valid formal request in every case; the address supports initial contact. Current authority request and complaint routes remain available.