KVKK Information Notice for Website Visitors and Contact Enquiries
Last updated: August 23, 2026
This Information Notice is provided pursuant to Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and relates specifically to personal data processed in connection with visits to alanfilms.com and communications made with Alan Films.
1. Data Controller
The data controller within the meaning of the KVKK is:
BERK ALAN
Trading as Alan Films
Zühtüpaşa Mahallesi, Şefikbey Sokak No:3
Archerson Köşkü, Kadıköy/İstanbul
Türkiye
Email: info@alanfilms.com.tr
2. Personal Data We Process
Depending on how you interact with the website, the following categories of personal data may be processed:
Contact and identification data
Your name, surname, email address, company or organisation information and other information that you voluntarily provide when contacting Alan Films.
Enquiry and correspondence data
Information contained in project enquiries, production requests, proposals, collaboration enquiries and related email correspondence.
Technical and security data
IP address, browser and device information, access date and time, server logs and other technical information generated in connection with the secure operation of the website.
Cookie and preference data
Information necessary to operate essential website functions and your choices relating to optional cookies and third-party services.
Third-party video service data
Where you choose to enable content provided by YouTube or Vimeo, technical information such as your IP address, browser, device information and interaction with the relevant video service may be transmitted to those providers.
The website is not designed to intentionally collect special categories of personal data.
3. Purposes of Processing
Personal data may be processed for the following specific purposes:
- receiving and responding to project, production, business and collaboration enquiries;
- evaluating potential business relationships and project proposals;
- taking steps requested by you before entering into a contract;
- maintaining the technical operation and security of the website;
- detecting and investigating technical errors, misuse or security incidents;
- complying with applicable legal obligations;
- establishing, exercising or protecting legal rights;
- managing your preferences relating to optional cookies and third-party content;
- enabling YouTube or Vimeo content where you choose to activate the relevant service.
4. Method of Collection
Personal data is collected electronically:
- when you voluntarily contact Alan Films by email;
- when your browser communicates with alanfilms.com;
- through server and security logs generated during website access;
- through the website’s consent-management mechanism;
- when you choose to activate third-party video content.
Data may be collected by wholly or partly automated means.
5. Legal Grounds for Processing
Depending on the relevant processing activity, personal data is processed pursuant to the conditions set out in Article 5 of the KVKK.
Project and business enquiries:
Processing may be necessary for the establishment or performance of a contract or for taking steps at your request before entering into a contractual relationship.
Website operation and security:
Processing may be necessary for the legitimate interests of the data controller, provided that such processing does not prejudice your fundamental rights and freedoms.
Compliance and legal claims:
Processing may be necessary to comply with a legal obligation or for the establishment, exercise or protection of a right.
Optional technologies and third-party content:
Where the relevant processing activity legally requires consent, it is carried out on the basis of your explicit consent.
Providing information under Article 10 and obtaining explicit consent are separate processes. The provision of this Information Notice does not constitute a request for consent. This distinction is expressly required by the KVKK transparency rules.
6. Recipients and Purposes of Transfer
Personal data may be transferred, only to the extent necessary for the relevant purpose, to the following recipient groups:
Hosting and technical infrastructure providers
For website hosting, maintenance, security and technical operation.
Email and communication service providers
For receiving and managing correspondence initiated by you.
YouTube / Google and Vimeo
Only in connection with their respective services where the relevant third-party content is activated.
Professional advisers
Where necessary for the establishment, exercise or protection of legal rights.
Courts, regulatory bodies and competent public authorities
Where disclosure is required by applicable law or a lawful request.
Personal data is not sold to third parties.
7. Transfers of Personal Data Abroad
Certain third-party technology providers, including international video or infrastructure providers, may process personal data outside Türkiye.
Where personal data is transferred abroad, such transfer is subject to Article 9 of the KVKK and the applicable rules governing international transfers.
Under the current framework, international transfers may rely, as applicable, on an adequacy decision, an appropriate safeguard recognised under Article 9, or one of the limited statutory exceptions applicable to incidental transfers.
The KVKK’s international-transfer regime was amended with effect from 1 June 2024. Appropriate safeguards now include mechanisms such as the standard contracts issued by the Turkish Data Protection Authority. The Authority also states that statutory exceptions are intended for incidental, non-regular transfers, rather than continuous transfer arrangements.
Third-party video content on alanfilms.com is configured so that optional services are not intended to load before the relevant user choice has been made.
8. Retention
Personal data is retained only for as long as necessary for the purpose for which it was processed and for any additional period required by applicable law.
Project and business correspondence may be retained for the period necessary to:
- respond to the enquiry;
- manage a potential or existing business relationship;
- comply with applicable legal or accounting obligations; and
- establish, exercise or defend legal rights.
Technical and security logs are retained only for periods reasonably necessary for website operation, security and troubleshooting, subject to the practices of the relevant infrastructure provider.
When the applicable processing purpose and legal basis cease to exist, personal data is deleted, destroyed or anonymised in accordance with applicable law.
9. Your Rights Under Article 11 of the KVKK
Subject to the conditions set out in the KVKK, you have the right to:
- learn whether your personal data is being processed;
- request information if your personal data has been processed;
- learn the purpose of processing and whether the data is being used in accordance with that purpose;
- know the third parties to whom your personal data has been transferred in Türkiye or abroad;
- request correction where your personal data has been processed incompletely or inaccurately;
- request deletion or destruction of personal data where the applicable statutory conditions are satisfied;
- request notification of correction, deletion or destruction to third parties to whom the data has been transferred;
- object to a result arising against you through the exclusive analysis of processed data by automated systems; and
- claim compensation where you suffer damage as a result of unlawful processing of your personal data.
These rights form part of the information that a controller must provide under Article 10 of the KVKK.
10. Exercising Your Rights
Requests concerning your rights under Article 11 may be submitted to the data controller in accordance with Article 13 of the KVKK and the applicable Communiqué on the Procedures and Principles of Application to the Data Controller.
Data Controller: BERK ALAN
Address: Zühtüpaşa Mahallesi, Şefikbey Sokak No:3, Archerson Köşkü, Kadıköy/İstanbul, Türkiye
Email: info@alanfilms.com.tr
Under the applicable rules, requests may be made in writing or through another legally permitted method, including registered electronic mail (KEP), secure electronic signature, mobile signature, a previously notified email address registered in the data controller’s systems, or another application method recognised by law.
Your request should contain sufficient information to identify you and clearly describe the right you wish to exercise.