1. Introduction

This Data Policy explains how Turkish Postcards Archive (operating as www.TurkishPostcards.com) (“we”, “our”, “us”) collects, uses, stores, and protects personal data. We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

By using our website, you acknowledge that you have read and understood this policy.

2. Data Controller

The data controller responsible for your personal data is:
Turkish Postcards Archive
Attn: Data Privacy Officer
Email: privacy@TurkishPostcards.com
Website: www.TurkishPostcards.com

3. Categories of Data Collected

We may collect the following types of personal data:

• Identity Data: Name, organization, and contact details provided by you.
• Technical & Usage Data: IP address, browser type, operating system, referral sources, and pages visited.
• Communication Data: Content of inquiries requesting permission for images/descriptions.

4. Legal Basis for Processing

We process personal data only when a lawful basis under GDPR applies:

• Consent: When you voluntarily provide data (e.g., requesting permission to use content).
• Contractual necessity: To fulfill agreements with you.
• Legal obligation: To comply with applicable laws.
• Legitimate interests: To protect our intellectual property, improve services, and maintain website security.

5. Purpose of Processing

Personal data is used for:

• Reviewing and responding to content use requests.
• Managing intellectual property permissions.
• Maintaining website functionality and security.
• Communicating with users regarding approved uses of content.

6. Data Retention

We retain personal data only as long as necessary for the purposes stated above or as required by law. Once data is no longer needed, it will be securely deleted or anonymized.

7. Data Sharing and Transfers

• We do not sell or rent personal data.
• Data is shared with service providers providing hosting, IT security, and email services under strict confidentiality agreements.
• International Transfers: If data is transferred outside the EU/EEA (e.g., to servers in the USA), we utilize Standard Contractual Clauses (SCCs) to ensure data protection.

8. Your Rights Under GDPR

You have the following rights:

• Access, Rectification, Erasure, Restriction, Portability, and Objection.
• Withdraw consent: At any time.
• Lodge a Complaint: You have the right to lodge a complaint with a Data Protection Authority (DPA) if you feel your rights have been violated.

To exercise these rights, contact us at privacy@TurkishPostcards.com.

9. Security Measures

We use SSL/TLS encryption (HTTPS) to protect data in transit and implement organizational measures to prevent unauthorized access.

10. Cookies

We use essential cookies to make the website work. With your consent, we may also use analytics cookies to improve user experience. You can withdraw consent at any time via an email request.

11. Updates to This Policy

We may update this Data Policy from time to time to reflect changes in law or our practices. The latest version will always be available on our website.

12. Contact Information

For questions regarding this policy, please contact:
Data Privacy Officer / Turkish Postcards Archive
Email: privacy@TurkishPostcards.com