1. Introduction
In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), BLN Çevre Teknolojileri Ltd. Şti. ("BLN", "Company", "we"), acting as the data controller, hereby informs you regarding the processing of your personal data through this privacy notice.
2. Which Personal Data Do We Process?
We may collect the following personal data via the BLN Insights portal (blncevre.com/haberler.html):
| Data Category | Data Collected |
|---|---|
| Identity | First name, surname |
| Contact | Email address, optional telephone number |
| Corporate | Employer organisation, job title, organisation type (municipality, FMCG, DRS operator, etc.) |
| Transaction Security | IP address, browser information, cookie ID, session logs |
| Marketing | Subscription preferences, open/click-through data (for dispatched emails) |
| Source/UTM | Traffic referral source (referrer, utm_source, etc.) |
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Dispatch of the BLN Insights newsletter (subject to explicit consent)
- Fulfilling requests for early access to premium reports
- Creation and management of subscriber records
- Processing communication preferences, complaints, and unsubscription requests
- Conducting double opt-in email verification
- Fulfilling legal obligations (KVKK, Law on Regulation of Electronic Commerce - ETK, and relevant e-commerce legislation)
- Collecting website usage statistics and improving content quality (on an anonymous/aggregated basis)
- Serving as evidence in legal disputes
4. Legal Grounds
Your personal data is processed based on the following legal grounds set out in Article 5/2 of the KVKK:
- Explicit consent (Article 5/1): Newsletter subscriptions and marketing communications
- Explicit provision in law (Article 5/2-a): Data retention obligations under the KVKK, ETK, and e-commerce regulations
- Direct relationship with the establishment or performance of a contract (Article 5/2-c): Processing report access requests
- Legitimate interests of the data controller (Article 5/2-f): Website security, fraud prevention, and anonymised statistics
5. Data Transfers — Domestic and International
To deliver our services, your personal data may be shared with the following third parties:
| Recipient | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database and cloud infrastructure (PostgreSQL) | USA / EU (eu-central-1 Frankfurt) |
| Google LLC (Gemini AI) | Content generation (public source texts only; no personal data is transmitted to Gemini) | USA / EU |
| Google LLC (Gmail SMTP) | Newsletter email dispatch and internal operational notifications | USA / EU |
| GitHub, Inc. | Automation infrastructure (no personal data stored, script code only) | USA |
| Legal authorities | Where required by statutory obligations under Article 8/2-b of the KVKK | Türkiye |
International data transfers are conducted pursuant to Article 9 of the KVKK, based on Standard Contractual Clauses and/or explicit consent.
6. Retention Period of Data
- Active subscriber data: For the duration of your active subscription
- Unsubscribed user data: 3 years from the date of unsubscription (pursuant to Article 5 of the ETK and statutory limitation periods)
- Report request records: For the duration of the commercial relationship + 10 years (pursuant to the Turkish Commercial Code - TTK and Tax Procedure Law - VUK)
- Log/access records: 2 years (pursuant to Law No. 5651 on Regulation of Publications on the Internet)
- Cookie data: Periods specified in the Cookie Policy
7. Double Opt-In Verification
Before dispatching newsletters or marketing emails, a confirmation email is sent to the address provided in the subscription form. No commercial electronic messages will be sent to you unless you click the confirmation link within that email.
8. Your Rights Under Article 11 of the KVKK
As a data subject, you have the following rights:
- To learn whether your personal data is processed
- To request information if your personal data has been processed
- To learn the purpose of processing and whether data is used in accordance with its intended purpose
- To know the third parties to whom personal data is transferred domestically or internationally
- To request the rectification of incomplete or inaccurate data
- To request the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK
- To request notification of rectification, erasure, or destruction operations to third parties to whom personal data has been transferred
- To object to any outcome against you resulting solely from automated processing
- To claim compensation for damages incurred due to unlawful processing of personal data
9. How to Exercise Your Rights
You may submit your applications through the following channels:
- Email: kvkk@blncevre.com
- Post: Nida Kule Kozyatağı, Değirmen Sk. No:19/B Kat:10, 34742 Kadıköy / İstanbul, Türkiye (the envelope must be clearly marked "KVKK Application")
- Registered Electronic Mail (UETS): 25969-65324-90064
Your applications will be answered within 30 days at the latest in accordance with Article 13 of the KVKK. Applications are free of charge; however, if the response requires an additional cost, a fee not exceeding the tariff set by the Personal Data Protection Board may be charged.
Should your request be rejected, you reserve the right to lodge a complaint with the Personal Data Protection Board within 30 days of receiving the response.
10. Amendments
This notice may be updated in response to legal amendments or changes in our service scope. The most current version will always be published at blncevre.com/kvkk.html.
Last updated: 20 April 2026 (Version v1.0). Version history is maintained by BLN.