How I use your work contact details.

Who is responsible

I am: Kadir Balalan, a sole trader based in Türkiye. I decide how your details are used, which makes me the "controller" in data protection law. Reach me at kadir@kadirbalalan.com.

My emails to you come from kadir@kadirbalalan.net or kadir@kbalalan.com. Both are mine.

I work alone. I have not appointed a representative in the EU or the UK, and I have no data protection officer.

What I hold about you

• Your name, work email address, job title and company.
• The public pages where I found those: your company's own site, its blog, public bios and press pages.
• The articles your company has published that I audited.
• If you reply, what you wrote.

Nothing about your private life.

Where it came from

From public web pages, found by search and on your company's own site. You did not give it to me.

Your email address is either published on the web, or I worked it out by testing your company's usual address format against its mail server. I buy nothing from data brokers.

Ask, and I'll tell you the exact pages I used for your name, role and address.

Why I use it, and on what legal basis

To send you one short sequence of at most four emails offering a content audit or an article refresh that is relevant to your role, and to handle your reply.

The legal basis is legitimate interests (Article 6(1)(f) of the GDPR and the UK GDPR): my interest in offering a business service to someone whose job it concerns. I keep that narrow by using only work details that are already public and by stopping after four emails.

You can object at any time, and your objection is final. Reply "no" or email me, and you are never emailed again.

Who else handles it

I use these companies to do this work. Each one receives only what its job needs.

The prospect records themselves are kept in a database I host on my own computer. Backups travel encrypted to my Google Drive.

I don't sell your details or pass them to other marketers.

Where it goes

Apart from Seznam, which is in the Czech Republic, these companies are in the United States, and I am in Türkiye, so your details are handled outside the UK and the European Economic Area. Transfers to the companies above rely on their standard contractual clauses or equivalent safeguards. Email me if you want to know more about them.

How long I keep it

• If you don't reply: your details are deleted within 12 months of my last email.
• If you say no: I keep only your address, your company's domain and the date, so that you are never emailed again.
• If you reply: I keep the conversation while it is active and for 12 months after.

Your rights

You can ask me to:

• show you what I hold about you (access);
• correct it;
• delete it;
• restrict what I do with it;
• stop using it to contact you (objection).

Reply to any of my emails or write to kadir@kadirbalalan.com. It is free, and I answer within one month.

You can also complain to the data protection authority in your own country. In the UK that is the Information Commissioner's Office (ICO), in Ireland the Data Protection Commission, in France the CNIL, and in Sweden IMY.

Automated decisions

None that has a legal effect on you, or any similarly significant one. Software gives each company an internal priority score, and that score only decides whom I email first.

This website

It sets no cookies and has no analytics or tracking. Its fonts and images are served from this site, so opening a page calls no other company's servers. Cloudflare hosts it and, like any web host, handles your IP address in order to send you the page.

The audit form on the home page sends nothing to the site: it opens a draft in your own mail app. If you email me, I keep the conversation as described above.