CyberArt.Space

Privacy Notice (KVKK)

Last updated: 30 October 2026

This English version is a translation; the Turkish text is binding.

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data in the CyberArt.Space service at https://cyberart.space is processed by Cengiz Tolga (address: Toronto; e-mail: tet.skynet@gmail.com) as data controller, as described below.

2. What we process, why, and on which legal basis

  • Account data (name or display name, e-mail address, a one-way hash of your password, two-step sign-in data, your chosen avatar, last sign-in): to open your account, sign you in and provide the service; contract (KVKK art. 5/2-c) and legitimate interest (art. 5/2-f).
  • Security and activity records (sign-in attempts, IP address, time, administrative actions, guest entries): to protect your account and the service from misuse and to meet legal duties (including Law No. 5651); legal obligation (art. 5/2-ç) and legitimate interest (art. 5/2-f).
  • Artist applications (name, e-mail, portfolio link, statement about your work, IP address): to assess the application and reply; entering into a contract (art. 5/2-c) and legitimate interest (art. 5/2-f).
  • Artist pages and works (name, biography, photo, links, the works you upload and their details): to show them to visitors at your request; contract (art. 5/2-c).
  • Letters and the guestbook (your text, your name, recipient, date): to deliver and show them and to moderate where needed; contract (art. 5/2-c) and legitimate interest (art. 5/2-f).
  • Visiting together and reactions: your position, view direction and the reactions you send (👏 ❤️ etc.) are relayed only to the people in the gallery at that moment and are not stored. Your name and avatar are visible to other visitors. “Visit alone” turns this off.
  • Guests from a public link: the nickname you choose, the time of entry, the link used and your IP address are written to the security log; your nickname is shown to others in the gallery marked “(guest)”; legitimate interest (art. 5/2-f) and legal obligation (art. 5/2-ç).
  • Copyright notices and KVKK requests (name, e-mail, your message, where the work is shown, IP address): to examine and answer them; legal obligation (art. 5/2-ç) and establishing, exercising or protecting a right (art. 5/2-e).

3. Data that stays on your device: photo mode, camera and the bot check

  • Photo mode: photos are made in your browser and leave your device only if you save or share them; they are not sent to or kept by us. No one’s name is added to a photo.
  • Camera (face tracking): where offered in the gallery it is optional and works only with your explicit permission. The camera picture is processed only on your device, in the moment, to move your avatar’s head and face; it is never sent to the server or to other people and is not recorded. Others receive only your avatar’s movement. You can withdraw the permission in your browser at any time.
  • Bot check: the “I’m not a robot” check on forms does a small calculation in your browser; no data is sent to a third party for it.

4. How data is collected

Electronically and partly automatically: through account opening, sign-in, forms, walking the gallery and the administration. See the Cookie Policy for cookies and browser storage.

5. Who receives it

Your data is not shared for advertising or marketing; no analytics or tracking tools are used.

  • Our hosting and storage provider, to run the service (servers and files: Almanya).
  • Competent public authorities and courts, where the law requires it and to the extent requested.

If our servers or provider are outside Turkey, the transfer follows the conditions and safeguards of KVKK art. 9 (for example the standard contract published by the Board).

6. How long we keep it

For as long as the purpose requires and the periods set by law (for example records under Law No. 5651); afterwards it is deleted, destroyed or anonymised. If you ask for your account to be closed, its data is deleted, subject to legal retention duties.

7. Your rights (KVKK art. 11)

  • to learn whether your personal data is processed and to request information about it;
  • to learn the purpose and whether it is used accordingly;
  • to know the third parties in Turkey or abroad it is transferred to;
  • to have incomplete or incorrect data corrected, and to have it deleted or destroyed under art. 7;
  • to have such corrections and deletions notified to those it was transferred to;
  • to object to a result against you arising solely from automated analysis;
  • to claim compensation for damage caused by unlawful processing.

8. How to apply

Use the request form (https://cyberart.space/legal/request), e-mail tet.skynet@gmail.com, or write to Toronto. We answer within thirty days free of charge (the Board’s tariff may apply where the action itself has a cost). If your request is refused, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board.