KVKK privacy notice

Your personal data is processed by [Şirket ünvanı] (“Zenart Digital”) as the data controller, within the scope described below.

• Company name: [Şirket ünvanı]
• Tax office and number: [Vergi dairesi/no]
• Location: Başakşehir, Istanbul
• Postal address for written requests: [Yazılı başvuru adresi]
• KVKK request email: [E-posta: KVKK başvurusu]

• Identity: first and last name.
• Contact: phone number or email address.
• Customer transaction: store or website link, the service or package chosen, message content, the address of the page the form was sent from and the page language.
• Security and website use: Google Analytics cookie ID, pages visited, source of the visit, device and browser details, approximate location (city level). Google Analytics 4 does not log IP addresses.
• For our clients, also: contract and invoice details, and account access permissions shared for the service.

We don't ask for special categories of personal data (such as health, religion or biometric data) in the form; please don't include such information in your message.

You provide your data through the contact form on the website, WhatsApp, email and phone; data about website use is collected automatically through analytics cookies.

• Replying to your meeting and quote requests
• Reviewing your store or accounts and preparing a proposal
• Concluding the contract and delivering the service
• Invoicing and meeting legal obligations
• Measuring website use and improving the website
• Protecting rights in case of a dispute

Your data is processed on the following legal grounds under Article 5 of the KVKK:

• Concluding or performing a contract (Art. 5/2-c): replying to your meeting and quote request; delivering the service if you become a client.
• Legal obligation (Art. 5/2-ç): keeping invoices and commercial records.
• Establishing, exercising or protecting a right (Art. 5/2-e): keeping records in case of a dispute.
• Legitimate interest (Art. 5/2-f): following up on your request and keeping correspondence in order, provided your fundamental rights and freedoms are not harmed.
• Explicit consent (Art. 5/1): analytics cookies, which only run if you give consent.

For the purposes above, and only as far as needed, your personal data may be transferred to:

• Form and email infrastructure: the form service that forwards form messages to us (currently Web3Forms) and Google Workspace, where our correspondence is kept.
• Google Analytics (Google): website usage statistics.
• WhatsApp (Meta): if you message us on WhatsApp.
• Competent public authorities: when the law requires it, upon request.

As these providers may have servers outside Turkey, transfers abroad are made under Article 9 of the KVKK on the basis of [Yurt dışı aktarım dayanağı].

Your data is kept for as long as the purpose of processing requires:

• Meeting requests: [Saklama süresi: görüşme talepleri] after the request is closed.
• Client contract and invoice records: for the periods required by the Turkish Commercial Code and the Tax Procedure Law.
• Analytics data: the period set in Google Analytics, [GA4 veri saklama süresi].

When the period ends, your data is deleted, destroyed or anonymised.

By applying to Zenart Digital, you have the right to:

• learn whether your personal data is processed,
• request information if it has been processed,
• learn the purpose of processing and whether it is used for that purpose,
• know the third parties in Turkey or abroad to whom it is transferred,
• ask for it to be corrected if it is incomplete or inaccurate,
• ask for it to be deleted or destroyed under the conditions in Article 7 of the KVKK,
• ask for corrections, deletions and destructions to be notified to the third parties it was transferred to,
• object to a result against you that arises solely from automated analysis of your data,
• claim compensation if you suffer damage because your data was processed unlawfully.

To exercise your rights, send your request in Turkish with your first and last name, Turkish ID number (for foreign nationals: nationality and passport or ID number), address, email or phone and your request, using one of the following:

• From the email address you previously gave us and that is in our records, to [E-posta: KVKK başvurusu]
• By a signed letter to [Yazılı başvuru adresi]
• By registered electronic mail (KEP), secure electronic signature or mobile signature to [KEP adresi]

We will conclude your request within 30 days at the latest, depending on its nature. If the process involves an additional cost, the fee schedule set by the Personal Data Protection Board may apply.

If your request is rejected, you find our reply insufficient or we don't reply in time, you can file a complaint with the Personal Data Protection Board.