I. Name and address of the responsible person
Responsible person within the meaning of the General Data Protection Regulation and other national data protection laws and other data protection regulations of the member states:
Ömer Karakuş Application and Design Office
Nef 22 Atakoy Residence D block d:136 34156 Bakirkoy / Istanbul
+90 212 660 60 40
a) General information on data processing
1. Scope of processing of personal data
In principle, we collect and use personal data from our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies where it is not possible to obtain prior consent for factual reasons and the processing of data is permitted by legal provisions.
b) Legal basis for the processing of personal data
As long as we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data necessary to fulfill a contract to which the data subject is a party. This also applies to the processing operations necessary to carry out pre-contractual measures.
To the extent that the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Article 6 (1) (c) of the GDPR is the legal basis.
Where the vital interests of the data subject or another natural person require the processing of personal data, the Letter d of Art. 6 para. 1 GDPR is the legal basis.
If the processing is necessary to protect the legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the primary interest, the letter f of Art. 6 para. 1 GDPR is the legal basis. for processing.
c) Data erasure and storage period
The personal data of the person concerned will be deleted or blocked as soon as the storage purpose ceases. Storage may also take place if provided by the European or national legislator in EU regulations, laws or other regulations to which the responsible person is subject. In addition, data will be blocked or deleted upon expiration of a retention period prescribed by the specified standards, unless further storage of the data is required for the conclusion or performance of a contract.
d) Provision of the website and creation of log files
1. Definition and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected here:
(1) Information about the browser type and version used
(2) User's operating system
(3) The user's internet service provider
(4) User's IP address
(5) Access date and time
(6) Websites from which the user's system accesses our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
e) Legal basis of data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.
f) Purpose of data processing
Temporary storage of the IP address by the system is necessary to ensure delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. We also use the data to optimize the website and ensure the security of our information technology systems. Evaluation of the data for marketing purposes is not included in this context.
Our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR also lies in these purposes.
g) Storage time
Data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the relevant session has ended. This is the case after seven days at the latest if the data is stored in log files. Beyond that, storage is possible. In this case, the users' IP addresses are deleted or alienated so that the calling client is no longer able to be assigned.
h) Opposition and elimination possibility
The collection of data for the provision of the website and the storage of the data in log files are absolutely necessary for the website to function. As a result, the user is unlikely to object.
a) Definition and scope of data processing
This website uses the following types of cookies, the scope and functions of which are described below:
– Temporary cookies
We use these cookies to make our website more user-friendly. Some elements of our website require that the calling browser be able to be identified even after a page change. The following data is stored and transmitted in cookies:
DPI resolution and sidebar status
b) Legal basis of data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 f GDPR.
c) Purpose of data processing
Our legitimate interest in the processing of personal data in accordance with Art. 6 (1) (f) GDPR also lies in these purposes.
e) Retention period, possibility of objection and removal
Temporary cookies (see a) are automatically deleted when you close the browser. These specifically include session cookies. These store a session ID to which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
j) email communication
1. Definition and scope of data processing
It is possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted by e-mail will be stored. In this context, it does not seek any data transfer to third parties. The data will only be used to process the conversation.
k) Legal basis of data processing
The legal basis for the processing of data transmitted at the time of sending an e-mail is the letter f of Art. 6 para. 1 GDPR. If the e-mail communication is intended to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
l) Purpose of data processing
The processing of personal data in the input mask only serves to process the person. If the communication is via e-mail, this is also the legitimate interest required in the processing of the data.
m) Storage time
Data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For personal data sent from the input mask of the contact form and by e-mail, this is the case when the conversation with the user has ended. The conversation ends when the facts in question can be deduced from the circumstances in which they are finally clarified.
n) Opposition and elimination opportunity
The user has the option to revoke his consent for the processing of personal data at any time. If the user contacts us via e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data recorded during communication will be deleted.
o) Rights of the person concerned
If personal data is processed by you, you are the data subject within the meaning of GDPR and you have the following rights against the responsible person:
1. The right to information
You can request confirmation from the responsible person whether personal data about you is processed by us.
If such processing is available, you can request information from the person responsible for the following:
(1) purposes of processing personal data;
(2) categories of personal data processed;
(3) the recipients or categories of recipients to whom your personal data is or will be disclosed;
(4) the planned retention period of personal data concerning you, or if specific information is not possible, the criteria for determining the retention period;
(5) the existence of the right to rectification or erasure of personal data concerning you, restriction of processing by the responsible person or the right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) where personal data is not collected from the data subject, all available information regarding the source of the data;
(8) meaningful information about the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) GDPR, and – at least in these cases – the relevant logic and the scope and intended effects of such processing. data subject.
You have the right to request information about whether your personal data is transferred to a third country or an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Article 46 GDPR in connection with the transfer.
p) Right of rectification
If the personal data processed about you is inaccurate or incomplete, you have the right to rectify and/or complete it to the responsible person. The responsible person must make the correction immediately.
q) Right to restriction of processing
You can request the restriction of the processing of your personal data under the following conditions:
(1) if you object to the accuracy of the personal data concerning you, for a period of time enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete personal data and instead request restriction of use of personal data;
(3) the responsible person no longer needs the personal data for the purposes of the processing, but you need them to make, exercise or defend legal claims; or
(4) If you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible person outweigh your reasons.
If the processing of personal data about you is restricted, such data may be used - except for storage - only with your consent or to make, exercise or defend legal claims or to protect the rights of another natural or legal person or to protect the rights of another natural or legal person. Matters of public interest of the Union or of a Member State are covered.
If the processing restriction is limited by the above conditions, you will be notified by the responsible person before the restriction is lifted.
r) Right of erasure
a) Obligation to delete
You can request the responsible person to delete the personal data about you immediately, and the responsible person is obliged to delete this data immediately if one of the following reasons applies:
(1) Personal data about you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent on which the processing is based pursuant to Art. 6 Para. 1 Letter or Art. 9 Para. 2 Letter, GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) Personal data about you has been processed unlawfully.
(5) The deletion of personal data concerning you is necessary for the fulfillment of a legal obligation under Union law or the law of the Member States to which the responsible person is subject.
(6) Personal data about you has been collected in relation to the information society services offered pursuant to Article 8 (1) of the GDPR.
s) Information to third parties
If the person responsible has made personal data about you public and has to delete it pursuant to Article 17 (1) of the GDPR, he will take appropriate measures, including technical measures, to protect the person responsible for data processing. Considering the current technology that processes personal data and the costs of implementation, you, as the data subject, request that they delete all links to this personal data or any copies or copies of this personal data.
No right to delete if processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to perform a task in the public interest or involved in the exercise of official power vested in the controller;
(3) for public interest reasons in the field of public health pursuant to Art. 9 (2) subparagraph i and Art. 9 (3) GDPR;
(4) For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89
(5) to assert, exercise or defend legal claims.
u) Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the responsible person, he is obliged to inform all recipients to whom personal data concerning you has been disclosed, of such rectification or deletion of data or restriction of processing. this turns out to be impossible or requires a disproportionate effort.
You have the right to be informed about these recipients by the responsible person.
v) Right to data portability
You have the right to receive personal data about you that you have provided to the responsible person in a structured, common and machine-readable format. In addition, you have the right to forward this data to another responsible person without interference from the person responsible for providing the personal data.
(1) the processing is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR or a contract pursuant to Art. 6(1)(b) GDPR; and
(2) processing is performed using automated procedures.
In exercising this right, you also have the right, to the extent technically possible, to have personal data about you transmitted directly from one responsible person to another responsible person. The freedoms and rights of others should not be affected by this.
The right to data portability does not apply to the processing of personal data necessary to perform a task in the public interest or to exercise the official authority vested in the controller.
w) Right of objection
For reasons arising from your personal situation, you have the right to object at any time to the processing of your personal data based on paragraph e or f of article 6, paragraph 1 of the GDPR; this also applies to profiling based on these provisions.
The person responsible will no longer process personal data about you unless the processing provides compelling legitimate grounds for processing that exceeds your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If personal data about you is processed for direct advertising purposes, you always have the right to object to the processing of your personal data for such advertising purposes; this also applies to profiling as long as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, personal data about you will no longer be processed for these purposes.
In connection with the use of information society services, regardless of Directive 2002/58/EC, you have the option to exercise your right of objection through automated procedures using technical features.
x) The right to revoke the declaration of consent under data protection law
Under data protection law, you have the right to revoke your consent at any time. The revocation of consent does not affect the legality of transactions carried out on the basis of consent, up to the point of revocation.
y) Automatic individual decision making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal consequences for you or similarly materially affects you. If a decision is made, this does not apply.
(1) necessary for the conclusion or performance of a contract between you and the responsible person,
(2) The laws of the Union or Member States to which the person responsible is subject are permitted and include appropriate measures to protect your rights and freedoms and your legitimate interests; or
(3) with your express consent.
However, these decisions should not be based on special categories of personal data pursuant to Article 9 paragraph 1 GDPR, unless paragraph 2, a or g of Article 9 applies and appropriate measures are taken to protect your rights and freedoms and legitimate interests.
In the cases referred to in (1) and (3), the responsible person will take appropriate measures to protect your rights and freedoms and your legitimate interests, including at least the right to human intervention on behalf of the person responsible. express their point of view and challenge the decision.
z) Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right, if you believe, to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of business or the Member State where the alleged infringement occurred. that the processing of your personal data is against GDPR.
The supervisory authority to which the complaint is submitted will inform the complainant of the status and consequences of the complaint, including the possibility of a remedy pursuant to Article 78 GDPR.