Data Protection Notice
Data controller
Yasin Şükrü Tan
Personal data processed and purposes
Personal data is processed on this site in three ways. Browsing: you do not need to provide a name, email or similar information to view the pages. Google Analytics 4 runs to measure visit statistics; it processes which pages are viewed, where the visit came from, an approximate location derived from your IP address, and device and browser information. The legal basis for analytics cookies is your explicit consent: unless you accept in the cookie banner, no cookie or identifier is stored on your device, and you can withdraw your consent at any time through the "Cookie settings" link at the bottom of the page. That measurement is for aggregate statistics: no visitor profile is built about you, no advertising targeting is carried out and no automated decision-making is applied. Contact: when you write by email, the name, email address and message content you send are processed solely to answer your question. Service: during online coaching, your identity, contact, measurement, training and health data are processed through the intake form and the weekly check-in form; the complete list of fields is set out item by item on the Explicit Consent page. Purposes: delivering the service, preparing and revising a training program suited to you, maintaining communication during the service, and meeting legal obligations arising from the sale. No marketing, profiling or automated decision-making is carried out beyond these purposes.
Health data
The PAR-Q+ (Physical Activity Readiness Questionnaire) answers in the intake form, together with diagnoses, medication, surgical history, pain and injury information, and the pain report in the weekly check-in form, are special categories of personal data under Article 6 of the Turkish Data Protection Law (KVKK). They are processed solely on the basis of your explicit consent and used for one purpose only: taking health constraints into account when selecting exercises and setting training load. This service is not a medical service; it does not involve diagnosis, treatment or rehabilitation, and personalised nutrition plans are out of scope. You are not required to give consent — if you do not, you do not have to submit the intake form, and you will be told that the service cannot then be planned safely. You may withdraw your consent at any time by email.
Data transfers
Form data is converted into an email on the server hosting this site and delivered to a mailbox on that same server; no database record or file is kept on the server and the form content does not leave the hosting provider. No third-party form or mail service is used. There are three exceptions. Analytics: visit statistics are measured with Google Analytics 4. Because the service is provided by Google, visit data is transferred to servers outside Türkiye; unless you accept in the cookie banner, that transfer carries no identifier. Your form content and health data are not included in that measurement. Bot protection: Cloudflare Turnstile runs when you submit a form, and only verification data and your IP address are sent to that service — your form content and health data are not. Payment: purchases are completed not on this site but on Shopier for Turkish customers and Gumroad for English-speaking customers; you provide payment and invoicing details directly to that provider and they are not returned to this site. Beyond these, your personal data is not shared with any third party; no transfer is made for advertising, marketing or data sales. Transfers to public authorities where required by law are reserved.
Retention period
Form data is stored only in the data controller's mailbox; because there is no separate database, a deletion request is satisfied in a single place. [EN_KVKK_RETENTION_PERIOD — how long form emails are kept after the coaching relationship ends; mirrors the open Turkish decision] Invoices and accounting records relating to a sale are independent of that period and are kept for as long as tax legislation requires. You may request deletion before the period expires; the request is honoured except for records that must be retained by law.
Rights of the data subject
Under Article 11 of the KVKK you have the right to apply to the data controller to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties to whom the data is transferred, in Turkey or abroad; request correction if the data is incomplete or incorrectly processed; request erasure or destruction where the grounds for processing no longer apply; request that correction and erasure be notified to third parties the data was transferred to; object to a result adverse to you arising from analysis carried out solely by automated systems; and claim compensation if you suffer damage due to unlawful processing. You can send your request to the email address below; it will be concluded as soon as possible and within thirty days at the latest. If the Personal Data Protection Board has set a fee tariff and the request entails additional cost, a fee under that tariff may be charged.
Requests and contact: iletisim@pt.yasinsukrutan.com