Privacy Policy

1. Who is responsible for your data

The controller of the personal data described in this policy, within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679) and of the Turkish Law on the Protection of Personal Data (Law No. 6698), is:

SECGİN İÇERİK MEDYA ANONİM ŞİRKETİ

Yenisahra Mah. Taşdelen Cad. No: 48, Kat: 3, Daire: 2, 34010 Zeytinburnu, İstanbul, Türkiye

Istanbul Chamber of Commerce registry number

836611-0

Ministry of Trade Central Registry System number

0879120126000588

Electronic mail

contact@metatopics.org

Telephone

+90 212 398 74 70, Monday to Friday, 09:00 to 18:00

No data protection officer has been designated, because the company does not carry out the kinds of processing that make one mandatory under Article 37 of the General Data Protection Regulation. Enquiries reach the company directly at the address above.

2. What this policy covers

This policy applies to metatopics.org and every page published on it. It does not apply to anything else, because these pages embed no third party content and load no resource from any server other than their own.

3. What is processed when you read a page

Requesting a page necessarily discloses certain technical information to the server that answers it. That information is written to a server log and consists of:

• the internet protocol address of the device or network making the request;
• the date and time of the request, to the second;
• the address requested, the method used and the response status returned;
• the quantity of data transferred;
• the browser and operating system identification string sent by your device;
• the address of the page that referred you, where your browser sends one.

Nothing else is recorded. The platform does not build a profile, does not attempt to recognise a returning reader, and does not combine this information with any other source.

4. Why it is processed, and on what legal basis

Server logs are processed for two purposes only: keeping the platform available and secure, and diagnosing faults. The legal basis is the legitimate interest of the controller under Article 6(1)(f) of the General Data Protection Regulation, and the corresponding ground in Article 5(2)(f) of Law No. 6698, which permits processing that is necessary for the legitimate interests of the controller provided it does not harm your fundamental rights and freedoms.

The balancing exercise required by those provisions has been carried out. The processing is limited to what a web server records automatically, is not used to identify individuals, is not disclosed to anyone for marketing, and is deleted on a fixed schedule. On that basis the interference with your interests is minimal and is outweighed by the need to operate a public website safely.

5. What is not done

• No cookies are set by this platform. The single item stored on your own device is explained in the Cookie Policy.
• No analytics, audience measurement, heat mapping, session recording or error reporting service is installed.
• No advertising network, conversion tracker, remarketing tag, pixel, beacon or advertising identifier is present.
• No fingerprinting of your device is attempted.
• No automated decision making or profiling within the meaning of Article 22 of the General Data Protection Regulation takes place.
• There is no form on this platform, so no data can be submitted through it.

Sponsored placements, where they appear, are ordinary text and images stored on this domain and served by the same server as the article around them. They observe nothing about you and report nothing to anyone.

6. If you write to us

When you send electronic mail, post or a telephone enquiry to the company, the content of your message and the address you sent it from are processed in order to answer you. The legal basis is Article 6(1)(b) of the General Data Protection Regulation where the message concerns a request made before entering into a contract, and Article 6(1)(f) in every other case, because the company has a legitimate interest in answering correspondence addressed to it.

Correspondence is kept for 24 months from the last message in the exchange, then deleted, unless a longer period is required in order to establish, exercise or defend a legal claim, or by a legal retention obligation.

7. Who else sees the data

Server logs are stored on infrastructure operated by the hosting provider that runs the platform, which acts as a processor on documented instructions under a written agreement meeting the requirements of Article 28 of the General Data Protection Regulation. The hosting provider does not use the data for its own purposes.

Beyond that, personal data is disclosed only where the company is legally obliged to disclose it to a competent public authority, or where disclosure is necessary to establish, exercise or defend a legal claim. Personal data is never sold, rented or exchanged.

8. Where the data is held

The servers that hold the platform and its logs are located within the European Economic Area. The company that operates the platform is established in Türkiye. Where personal data is transferred outside the European Economic Area, including access by the people who maintain the platform, that transfer is carried out under Chapter V of the General Data Protection Regulation on the basis of the standard contractual clauses adopted by the European Commission, together with the technical measures described in section 11. Transfers governed by Law No. 6698 are carried out in accordance with Articles 9 and 9/A of that Law.

9. How long the data is kept

Server logs

30 days from the date of the request, then permanent deletion.

Correspondence

24 months from the final message, then permanent deletion.

Records required by law

For the period the applicable law prescribes, and no longer.

10. Your rights

If the General Data Protection Regulation applies to you, you have the right to request access to your personal data (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object at any time to processing based on legitimate interests (Article 21).

If Law No. 6698 applies to you, Article 11 of that Law gives you the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to request correction, deletion or destruction, to request that any such action be notified to third parties to whom the data was transferred, to object to a result produced solely by automated analysis, and to claim compensation for damage arising from unlawful processing.

To exercise any of these rights, write to contact@metatopics.org. A reply is given without undue delay and in any event within 30 days. Because the platform stores no identifier that links a log entry to a named person, a request concerning server logs will normally need to identify the relevant internet protocol address and time window before the data can be located.

You may also lodge a complaint with a supervisory authority: in the European Economic Area, the authority of the country where you live, work, or where you believe the issue arose; in Türkiye, the Personal Data Protection Authority.

11. Security

The platform is served exclusively over an encrypted connection with strict transport security enforced. It carries a restrictive content security policy, sends no data to any third party host, and runs no code loaded from outside its own domain. Administrative access to the server is restricted to named individuals, and access to logs is limited to maintenance and security purposes.

12. Children

The platform is a general audience publication and is not directed at children. No age information is collected, and no service requiring an age check is offered.

13. Changes to this policy

Any change is published on this page with a new date at the top. Because there is no mailing list and no reader account, changes cannot be notified individually. The date shown above is the authoritative version indicator.