Privacy Notice
1. Data controller
Under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is KARA Mimarlık Ltd. Şti.. Our full identity and contact details are on the Legal information page.
2. What we process, why, and on what legal basis
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, e-mail, phone, message; technically IP address | Replying to your request | KVKK art. 5/2-c and 5/2-f | Message 2 years; IP 6 months |
| Newsletter (double opt-in) | E-mail address, language, subscription and confirmation dates with the IP address truncated (last part removed) at those moments, consent text and version, source form, delivery logs | Sending campaigns, new products and announcements; proving consent | Explicit consent (KVKK art. 5/1) and commercial message consent (Law 6563 art. 6) | Until you withdraw consent; withdrawal record 3 years; unconfirmed sign-ups 7 days |
| Security logs | IP address, browser data, login attempts, error logs | Information security, abuse prevention | KVKK art. 5/2-f (legitimate interest) | 90 days – 1 year (see table below) |
3. How we collect data
Your data is collected electronically from you through forms on the site, and automatically through server logs and (only with your consent) cookies.
4. Recipients
| Recipient | Country | Purpose |
|---|
Your personal data is not transferred to third parties other than the recipients listed above. If any of these recipients has servers abroad, the transfer is made under Article 9 of the KVKK (adequacy decision, appropriate safeguards such as the standard contract, or the incidental cases in art. 9/6).
5. Retention periods
The periods below are enforced automatically by the site software.
| Record | Period |
|---|---|
| Login attempts | deleted after 3 months |
| Administrator activity logs | deleted after 1 year |
| Not-found page logs | deleted after 6 months |
| IP/browser data in contact messages | cleared after 6 months |
| Contact messages, call-back and quote requests | deleted after 2 years |
| Cookie consent records | deleted after 2 years |
| E-mail delivery logs | deleted after 1 year |
| Newsletter delivery records | deleted after 1 year |
| Raw visit statistics records | deleted after 3 months |
6. Special categories of personal data
Our site and forms do not ask for special categories of personal data such as health, biometric, religious or criminal-record data; please do not include such information in forms or messages.
7. Your rights and how to apply
Under Article 11 of the KVKK you have the right to: (a) learn whether your personal data is processed; (b) request information if it has been processed; (c) learn the purpose of processing and whether it is used accordingly; (ç) know the third parties to whom it is transferred in Türkiye or abroad; (d) request correction of incomplete or inaccurate data; (e) request erasure or destruction under Article 7; (f) request that (d) and (e) be notified to third parties to whom the data was transferred; (g) object to a result against you arising exclusively from automated analysis; (ğ) claim compensation for damage due to unlawful processing.
You may apply in writing (wet-signed letter to the address on our Legal information page), via registered e-mail (KEP), with a secure electronic or mobile signature, or from an e-mail address previously registered with us. We reply free of charge within 30 days at the latest (KVKK art. 13). If your application is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application (KVKK art. 14). Visitors from the EU also have the rights under GDPR art. 15–22.