Privacy notice

Who is responsible

This notice explains how personal data of visitors to ivay.com.tr is processed under Türkiye's Personal Data Protection Law No. 6698 (KVKK) and, for visitors from the European Union, the GDPR.

Data controller: the private individual who owns the ivay brand. Requests and contact: ivaymusicofficial@gmail.com. Identity details are disclosed on request to a person exercising their data protection rights and to competent authorities.

This site sells nothing, has no user accounts and uses no advertising or tracking cookies.

What we process and why

Server and security logs. When you open the site, your IP address, browser details and request time are processed by Cloudflare, which hosts the site. Purpose: delivering the site and preventing attacks and abuse. Legal basis: legitimate interest (KVKK art. 5/2-f, GDPR art. 6(1)(f)). For rate limiting we keep only an irreversible hash of your IP address, for at most 24 hours.
Email. If you email us, your address, your name (if given) and your message are used to reply. Legal basis: steps prior to a contract and legitimate interest. Correspondence is deleted no later than 2 years after the matter is closed. Our email is provided by Gmail (Google).
Visit statistics (only with your permission). Cloudflare Web Analytics counts page views anonymously. It sets no cookies and builds no personal profile. Legal basis: consent, which you can withdraw at any time in the cookie settings.
YouTube players (only with your permission). When you open a player to listen to a beat, YouTube (Google) receives your IP address and browser details and may use its own cookies. Players never load without your permission and use the privacy-enhanced mode (youtube-nocookie.com). Legal basis: consent.
Admin area. For site managers only: username, password hash, authenticator key, session cookie and an activity log.

Who receives data

Your data is never sold or shared for advertising. It is only passed to the service providers we use to run the site: Cloudflare, Inc. (hosting, security, database, statistics), Google LLC (Gmail, YouTube). Their servers may be located outside Türkiye and the EU; such transfers follow KVKK art. 9 and, where applicable, GDPR chapter V (for example standard contractual clauses). Information may be given to competent authorities when the law requires it.

Your rights

You can ask whether your data is processed, request access, correction, deletion or restriction, object to processing, ask who it was shared with, withdraw consent, and claim compensation for unlawful processing. EU residents also have the right to data portability and to complain to their local supervisory authority.

Send your request to ivaymusicofficial@gmail.com with your name, a way to reach you and what you are asking for. We answer within 30 days, free of charge. If you are not satisfied, you can complain to Türkiye's Personal Data Protection Authority (KVKK) or, in the EU, to your data protection authority.

Security

The site only runs over encrypted connections (HTTPS). The admin area requires a password and an authenticator code; passwords are stored as irreversible hashes. No system is perfect; if a breach occurs, the authority and affected people are notified within the legal deadlines.

Changes

This notice is updated when needed. The Turkish version prevails in case of discrepancy. Last updated: 3 November 2026.