In short
- This site has no analytics, no advertising and no tracking cookies.
- It processes your data only when you email us, and in server logs for security.
- The server is in Germany. Cloudflare and the mail provider are outside the EU; the safeguards are listed below.
- You can ask for a copy, a correction or deletion at any time, and complain to your local authority.
1 · GDPR article 3(2)
Who this notice applies to
Carcha Labs is based in Türkiye and has no establishment in the EU. The GDPR applies when we offer our products to people in the EU or EEA. This notice covers this website and email you send us.
2 · GDPR article 13(1)(a)
Who is responsible
Buğra Ömer Aydemir, trading as Carcha Labs, Istanbul, Türkiye. Write to [email protected] for anything about your data.
3 · GDPR articles 6 and 13(1)(c)
What we process, and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, message | Answering your message | Article 6(1)(b) when you ask about a product; otherwise 6(1)(f), our interest in replying to people who write to us |
| IP address, time, page, browser, referring page | Keeping the site secure and fixing errors | Article 6(1)(f), our interest in a secure service |
You do not have to give us any data to read this site. Without an email address we cannot answer you.
4 · GDPR chapter V
Where your data goes
| Provider | Role | Where | Safeguard |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Runs the server | Frankfurt, Germany | Inside the EU |
| Cloudflare, Inc. | Delivers the site and protects it against attacks | United States, with servers worldwide | EU-U.S. Data Privacy Framework certification, with the Commission standard contractual clauses as fallback |
| Proton AG | Hosts the mailbox that receives your email | Switzerland | European Commission adequacy decision for Switzerland |
We read and answer email from Türkiye. Türkiye has no adequacy decision from the European Commission; we receive your data directly from you when you write to us.
5 · GDPR article 13(2)(a)
How long we keep it
Emails are deleted 12 months after the last reply. Server logs are deleted after 14 days.
6 · GDPR articles 15 to 22
Your rights
| Right | Article | What it means |
|---|---|---|
| Access | Art. 15 | Ask whether we hold data about you and get a copy. |
| Rectification | Art. 16 | Have wrong or incomplete data corrected. |
| Erasure | Art. 17 | Have your data deleted when there is no reason left to keep it. |
| Restriction | Art. 18 | Have the use of your data paused while a question is settled. |
| Portability | Art. 20 | Get the data you gave us in a common, machine-readable format. |
| Objection | Art. 21 | Object to uses that rely on our legitimate interest. |
| Complaint | Art. 77 | Complain to a data protection authority in the EU. |
We make no decisions about you by automated means alone, so article 22 does not come into play.
7 · GDPR article 12(3)
How to use your rights
Email [email protected] and say which right you want to use. We answer within one month. If we need to confirm who you are, we ask for no more than that.
8 · GDPR article 77
Complaints
You can complain to the data protection authority in the EU country where you live or work. The European Data Protection Board lists every authority.
9 · Version history
Changes to this document
When this document changes, the version number goes up and the change is listed here.
- v1 · 12 Oct 2026First version