Last updated: September 3, 2026
Privacy
This portfolio is designed to process as little visitor data as possible.
Data controller
Can Mürselay is the data controller for this personal portfolio. This page explains the limited data flows associated with the portfolio.
Data processed and collection method
There is no contact form or user account on this website. If you voluntarily send a message by email or WhatsApp, your name, contact details, profile information, message content, and any attachments may be collected electronically and directly from you. Cloudflare may automatically process technical data such as IP addresses, request headers, visited URLs, and timing information to deliver and secure the pages and prevent abuse.
Purposes and legal bases
General inquiries may be processed under the legitimate-interest condition in Article 5(2)(f) of Turkey’s Personal Data Protection Law to respond to the request, provided fundamental rights are not harmed. Data concerning potential work may be processed under Article 5(2)(c) to the extent it is directly related and necessary to establish or perform a contract; records necessary to establish, exercise, or protect a right under Article 5(2)(e); and technical data necessary for site security and abuse prevention under Article 5(2)(f), provided fundamental rights are not harmed. Data is not used for a marketing list or automated decision-making without separate permission.
Recipient groups and international services
The site does not send message content to Microsoft/Hotmail or WhatsApp/Meta until you open an external link and choose to send a message. When you use those services, communication data may be processed outside Türkiye; Cloudflare infrastructure may process outside Türkiye the technical data needed for site delivery, security, and visitor measurement. Sharing is limited to responding to communications, delivering and protecting the site, or meeting legal obligations. A transfer abroad by the data controller should not take place until a valid mechanism under Article 9 has been separately verified.
Retention
Contact records directly controlled by Can Mürselay are kept only as long as necessary to manage the request and any potential working relationship. Longer retention is limited to an applicable legal obligation or the period needed to protect a right. When the purpose ends, those records are deleted, destroyed, or anonymized within applicable deletion and backup cycles. Copies and backups held by service providers remain subject to the provider’s retention and deletion processes.
Visitor measurement
Cloudflare Web Analytics is used on the production domain to understand aggregate page views and site performance. This portfolio does not track visitors for advertising or user profiling.
Case-study visuals
Case-study screens were recreated in isolated local environments with synthetic or representative data. Production personal data, real device identifiers, institution-specific addresses, and access credentials are not published.
Cookies and external links
The portfolio itself does not use cookies, localStorage, or user accounts. Essential technical operations provided by Cloudflare security services are governed by Cloudflare’s policies. LinkedIn, email, and WhatsApp links open external services; no WhatsApp code or tracking widget is embedded in this site, and the link does not send a message automatically.
Rights and applications
Under Article 11 of Turkey’s Personal Data Protection Law, you may learn whether your data is processed; request information about processing, its purpose, compatible use, and domestic or international recipients; request correction; request deletion or destruction when the conditions apply and notification of those actions to recipients; object to an adverse result produced solely by automated analysis; and seek compensation for damage caused by unlawful processing. Formal applications follow Article 13 and the Communiqué on Applications to Data Controllers, including written delivery, registered electronic mail, secure or mobile signature, or an email address previously provided to and registered by the controller. The ordinary email below is for general questions and preliminary information about an appropriate application channel; it is not presented as a universal formal application channel.
For general privacy questions: can_mrsly@hotmail.com