Privacy Policy
Updated:
This policy explains what happens to personal data when you visit tunedness.com or write to us. The short version: the site is static, sets no cookies of its own, runs no advertising or tracking scripts, and holds no accounts.
We handle personal data in line with the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).
Who is responsible
Centvix operates this site under the Tunedness brand and is the data controller for the data described here. Every question about this policy, and every request about your personal data, goes to [email protected].
What we collect
Server logs
The site is hosted on Cloudflare Pages. Like any host, Cloudflare processes your IP address and request details (the page requested, time, browser and device type) at network level to deliver the page and protect it against abuse. We do not build visitor profiles from these logs.
Analytics
We use Cloudflare Web Analytics. Its beacon counts page views without cookies and without fingerprinting visitors. We use the numbers to see which notes are read, not to identify anyone.
Theme preference
Your light or dark choice is stored in your own browser’s localStorage under
the key tunedness-theme. It stays on your device and is never sent to us. See
the Cookie Policy for how to clear it.
Search
Search runs entirely in your browser. What you type is not sent to a server.
Email you send us
If you write to [email protected], we receive your email address, your name if you give it, and whatever you put in the message. We do not add you to a mailing list from it.
Why we process it, and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Server logs | Deliver the site, keep it secure | Legitimate interests (GDPR Article 6(1)(f); KVKK Article 5(2)(f)) |
| Analytics | Understand which content is read | Legitimate interests (same) |
| Email correspondence | Answer you; prepare or run an engagement | Legitimate interests, and steps taken at your request before a contract (GDPR Article 6(1)(b); KVKK Article 5(2)(c)) |
| Accounting records the law requires | Meet legal obligations | Legal obligation (GDPR Article 6(1)(c); KVKK Article 5(2)(ç)) |
| Correspondence kept to bring or defend legal claims | Establish, exercise or defend a claim within the limitation period | Legitimate interests (GDPR Article 6(1)(f)); establishment, exercise or protection of a right (KVKK Article 5(2)(e)) |
How long we keep it
Server logs and analytics data are kept by Cloudflare under its default settings, currently about 31 days. We do not copy them and have not switched on longer log storage.
We keep general email correspondence for two years after the last message. If we work together, we keep it for as long as we need it to run the engagement and meet our legal obligations, or to establish or defend a legal claim within the limitation period. When that need ends, we delete it.
Who else sees it
- Cloudflare hosts the site and provides the analytics beacon.
- Our email provider stores the messages you send us.
We do not sell personal data and we do not share it for advertising. Some of these providers operate outside Türkiye and the European Economic Area, so your data may be transferred internationally. Where that happens, we rely on the safeguards the applicable law requires.
Client data
Work for clients involves material that is far more sensitive than a website visit: datasets, model weights, prompts, evaluation sets and traces. That material is not covered by this policy. It is governed by the contract for each engagement, which sets out where it is kept, who can reach it, and when it is returned or destroyed. Unless the contract sets another period, we return or destroy it within 30 days of the engagement ending. If you are considering working with us and want those terms before a contract exists, ask in your first message.
Your rights
Your rights depend on the law that applies to you. We apply both.
Under KVKK (Law No. 6698, Article 11)
You can ask us to:
- tell you whether we process your personal data, and give you information if we do;
- tell you why we process it and whether it is used for that purpose;
- name the third parties, in Türkiye or abroad, that we have passed it to;
- correct data that is incomplete or inaccurate;
- delete or destroy it, within the conditions the law sets;
- tell the third parties we passed it to about any correction, deletion or destruction;
- consider your objection to a result against you that comes solely from automated analysis of your data;
- compensate the damage you suffered because the data was processed unlawfully.
Apply to us first, in writing, at [email protected]. We answer as soon as we can and no later than 30 days after your application, in writing or electronically. If we reject your application, you find our answer inadequate, or we do not answer in time, you may then complain to the Personal Data Protection Board. The Board does not take a complaint before you have applied to us.
Under the GDPR (Articles 15 to 22)
You have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and the right not to be subject to a decision based solely on automated processing. We answer without undue delay and within one month of receiving your request. You may complain to a supervisory authority, such as the one in the EU country where you live or work, at any time. You do not need to apply to us first.
Making a request
Email [email protected] from the address the request concerns. We may ask you to confirm who you are before we act on it.
Changes
If this policy changes in a material way, we will update it here and change the date shown under the title.
Questions: [email protected]