Privacy notice

The data controller is Iryna Dogan (Dogan Beauty), Bodrum, Türkiye. Contact: info@doganbeauty.com.

• Audience and channel analytics: which pages are visited and which channels (search, social media, campaigns) bring visitors.
• Enquiry attribution: linking a contact-form enquiry to the visit it came from, so we know which channel produced it.
• Bot filtering: telling automated traffic apart from people so the figures are not inflated.

Only the items below are recorded. Query strings and fragments are dropped before anything is stored.

• A random visitor id stored in a cookie (see below).
• The page path you open, without the query string.
• The host of the site that referred you (for example instagram.com), not the full address.
• Campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), lower-cased and shortened. For advertising click identifiers we keep only the type (for example google or meta), never the identifier itself.
• An estimate of your country, network category and network operator, derived from your IP address.
• Your browser family and major version, and whether the request looks automated, derived from the user-agent.
• Visible time on the page, scroll depth, and whether you interacted with the page. These are the only values read from your device.
• Clicks on the WhatsApp, phone, shop (Shopier) and Instagram links.
• The fact that the contact form was submitted, linked to the visit. Your name, email and message are not part of the analytics.
• Your IP address and full user-agent, kept separately for at most 7 days and used only to verify bots, retry the estimates above and troubleshoot. They are never in backups or logs.

The visitor id is pseudonymous personal data: it does not contain your name, but it can single out one browser over time.

• db_vid: a random visitor id for the browser, not for a person. It lasts 90 days from the day it is issued and is never extended. It is HttpOnly, Secure and SameSite=Lax, and it is not readable by scripts or shown in the page.
• db_optout: set when you opt out (below). It lasts one year and only records your choice.
• db_internal and db_test: used only in the site owner’s own browser and for testing, to keep that traffic out of the figures. Visitors do not receive them.

• Detailed visit records (pages, events, derived estimates): 90 days. This can overrun by up to one maintenance interval.
• Raw IP address and full user-agent: at most 7 days.
• Aggregated totals and breakdowns that contain no visitor id: kept long term.
• Nightly backups contain aggregated data only and are kept for 30 days. Before a database migration we also make a backup of every table except the raw IP address and user-agent; it is deleted within 24 hours of a successful migration.

Nobody. The data stays on our own server and is not shared with advertising networks or other analytics providers.

We rely on our legitimate interest in understanding how the website is used and which channels bring enquiries (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). You can object at any time by using the opt-out below. This notice does not claim that this basis settles any consent requirement that may apply to cookies or similar technologies in your country.

Analytics is active in this browser unless you opt out.

Opting out sets a cookie that records your choice and removes the visitor cookie from this browser. Records already stored are kept until their retention period ends. If you clear cookies, the choice is forgotten.

Under KVKK Art. 11 and, where it applies, the GDPR (Arts. 15 to 21), you can ask whether data about you is processed, ask for information, correction, deletion or restriction, object to the processing, and complain to the Personal Data Protection Authority (KVKK) or to your local supervisory authority. Write to info@doganbeauty.com.

The analytics records are not linked to your name. To find them we may need details that identify your browser, which we may not be able to obtain; the opt-out above and clearing your cookies are the most direct controls.

If you write to us through the contact form, we use your name, email and message only to answer you. They are kept separately from the analytics.