1. Data Controller
Your personal data is processed by Agah Demirci, acting as data controller, within the scope described below.
- Address: 19 Mayıs Mah. Nutuk Cad. No: 26/A, Büyükçekmece / İstanbul
- E-mail: bilgi@mimaragahdemirci.com
- Telephone: 0212 843 47 51
2. Personal Data Processed and Purposes of Processing
Through the consultation request form, we process only the following data for the purposes stated alongside each:
- Identity and contact: name and surname, telephone, e-mail — to respond to you and arrange the meeting.
- Location: province, district — to assess the request and determine the appropriate form of meeting (office/online).
- Project information: project type, description, approximate size, timing, plot information where available (ada [block], pafta [sheet], parsel [parcel]) and zoning note — to carry out a preliminary assessment of your request.
- Images you upload: (optional) images of the plot, space or references — to understand the project better.
- Meeting preference: your preferred time range and type of meeting — to receive you at a suitable time.
In addition, transaction security data may be generated in the systems of the infrastructure provider hosting the site: IP address, connection date and time, access and error logs, browser and device information. These records are generated for the purposes of ensuring information security, preventing unauthorised access, resolving technical problems and detecting misuse. These records are not generated for tracking purposes; they are retained for the technical period determined by the hosting provider.
3. Method of Collection and Legal Grounds
Your personal data is collected through your completion of the consultation request form on the website, entirely by automated means and in electronic form. Unless you complete the form, no data of yours is processed by this route.
Your data is processed on the legal grounds listed in Article 5 of the KVKK, determined separately for each purpose:
- Identity, contact, location and project information — to assess your request and to arrange a meeting; the carrying out of the necessary steps, at your request, prior to the conclusion of a contract and the legitimate interest of the data controller. Your explicit consent is not additionally required for this processing.
- Images you optionally upload — uploading is entirely your choice; this data is processed on the basis of your explicit consent. If you do not upload images, your request is still assessed.
- Transaction security data — the legitimate interest of the data controller and legal obligations arising from the relevant legislation.
- Records retained in the event of a dispute — the establishment, exercise or protection of a right.
None of these grounds is used to promote products or services to you; no processing is carried out for marketing purposes.
4. Transfer of Personal Data
Your data is not shared with third parties or sold for advertising or marketing purposes. Only the infrastructure providers required for the technical provision of the service may access the data, and only for that purpose:
- Netlify, Inc. — the cloud infrastructure provider supplying website hosting, form management and backup services. The servers are outside Turkey (see §5).
- Natro (Nics Telekomünikasyon A.Ş.) — the server provider supplying and backing up the electronic mail and communication infrastructure.
Mailboxes and backups are held on this infrastructure solely for the purposes of carrying out communication activities, managing electronic mail processes and securely storing data (backup/archiving).
Transfers may be made to legally authorised public institutions and organisations as required by the relevant legislation.
5. Transfer of Personal Data Abroad
The website and consultation request form infrastructure is provided by Netlify, and the servers are outside Turkey. Therefore, the data you submit through the form is hosted and processed on systems abroad.
This transfer is carried out solely for the purpose of providing the service (hosting and transmission) and is limited to that purpose. Your data is not used on the infrastructure abroad for advertising, marketing or profiling purposes.
If you wish not to be included within the scope of this transfer, you may contact us using the telephone number or postal address given at the end of this notice instead of using the form.
6. Retention Periods and Destruction
The data collected through the consultation request form is retained for a maximum of 6 months for the purpose of assessing your request; at the end of this period it is erased (rendered inaccessible and unusable for the relevant users). If you submit an erasure request earlier, your data is erased without waiting for that period.
- Images you optionally upload — erased once the request has been assessed; they may also be erased earlier at your request.
- System and security logs — kept for the technical period determined by the hosting provider.
If your request develops into a project, the data relating to that work may additionally be retained for the statutory retention periods prescribed by the contractual relationship and by the relevant legislation, such as the Turkish Commercial Code and tax legislation. In such a case you are informed separately.
7. Data Security
The principal technical measures taken to protect your data:
- The site and the form run entirely over an encrypted connection (HTTPS).
- The site has no database, membership system or user login; form records are held in the administration panel of the infrastructure provider.
- The site contains no third-party tools operating for advertising, user behaviour tracking or marketing purposes.
- Form data may be accessed only by the data controller and, limited to the technical delivery of the service, by authorised infrastructure providers.
In the event that your data is obtained by others through unlawful means, the situation is notified to you and to the Personal Data Protection Board as soon as possible, pursuant to the fifth paragraph of Article 12 of the KVKK.
8. Cookies and Server Logs
This website does not use cookies for marketing, analytics or user behaviour tracking purposes; no data is stored in your browser for these purposes. For this reason no cookie consent is requested on the site.
Separately from cookies, technical server logs may be generated on the hosting infrastructure (see §2). These records are not for tracking purposes; they are generated for information security and technical operation.
If analytics or measurement tools are added in future, this notice will be updated, a cookie policy will be prepared and the necessary consent mechanism will be established before they go live.
9. Profiling and Automated Decision-Making
No profiling is carried out on the basis of the data you share, and no decision concerning you is produced solely by automated systems. Consultation requests are reviewed only by the data controller, through human assessment.
10. About the Images You Upload
Adding images to the consultation request form is entirely optional. To prevent unnecessary data sharing, we ask you to observe the following:
- Do not upload images in which third parties are clearly identifiable.
- Do not upload documents containing special categories of personal data, such as health reports or identity documents.
- Do not share personal information appearing in title deeds, identity documents or similar records that is not necessary for assessing the request.
If you would like content uploaded by mistake to be erased, you need only contact us through the communication channels below; the relevant content will be erased.
The images you upload are used solely for the purpose of assessing your request. They are not published for portfolio, promotional or advertising purposes without your explicit permission.
11. Your Rights (KVKK Art. 11)
Pursuant to Article 11 of the KVKK, by applying to the data controller you have the following rights:
- To learn whether your personal data is being processed,
- To request information about it if it has been processed,
- To learn the purpose of processing and whether the data is used in accordance with that purpose,
- To know the third parties in Turkey or abroad to whom your personal data has been transferred,
- To request its correction if it has been processed incompletely or incorrectly,
- To request its erasure or destruction within the conditions set out in the Law,
- To request that correction, erasure and destruction operations be notified to the third parties to whom the data has been transferred,
- To object to a result arising against you through analysis solely by automated systems,
- To claim compensation for damage suffered as a result of unlawful processing.
12. Application
To exercise your rights, you may submit your requests by one of the following means, pursuant to the Communiqué on the Procedures and Principles for Applications to the Data Controller:
- In writing to the address above (in person, through a notary or by post),
- By secure electronic signature or mobile signature,
- Through the e-mail address you have previously notified to the data controller and which is registered in our system.
Your application must enable verification of your identity; depending on the nature of the request, additional information or documents may be requested. Your application will be concluded within 30 days at the latest. If the process requires an additional cost, the fee in the tariff determined by the Board may be charged.
For the general principles concerning the protection of your personal data, you may refer to our Privacy Policy page.