Privacy & Cookie Policy

This Privacy and Cookie Policy explains how Erdoğan Kamar, trading under the Artsution brand (“Artsution”, “we”, “us”), processes your personal data through the artsution.com.tr website (the “Site”) and in communications initiated through the Site. For detailed information under the Turkish Personal Data Protection Law No. 6698 (“PDPL”), please see our PDPL Privacy Notice.

1. Data Controller

Erdoğan Kamar – Artsution, Beylikdüzü / Istanbul, Türkiye · Email: info@artsution.com.tr · Phone: +90 544 800 30 22

2. Personal Data We Process

• Identity and contact: full name, company/organization name, email address, phone number.
• Request and client transaction data: the service you need, estimated budget and timing preferences, project description, the content of correspondence and meetings, proposal and contract details.
• Transaction security: IP address, browser and device information, date/time of visit and server logs.
• Usage and cookie data: pages visited, session duration, referring source and similar statistical data (only through analytics cookies, and only if you consent).
• Financial: invoicing and payment details if a contract is concluded.

The Site is not directed at persons under 18, and we do not knowingly collect data from children.

3. Purposes of Processing

• To evaluate your project and quote requests, respond to you and prepare proposals;
• To conclude and perform contracts, and to manage projects, delivery and support;
• To carry out finance, accounting and invoicing operations;
• To keep the Site secure, prevent misuse and resolve technical issues;
• With your consent, to measure and improve the use of the Site statistically;
• To comply with legal obligations and respond to requests from competent authorities.

4. Legal Bases

Under Article 5(2) of the PDPL, we process your personal data where processing is directly related to the conclusion or performance of a contract (c), necessary to comply with our legal obligations (ç), necessary to establish, exercise or defend a right (e), or necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms (f). Analytics cookies and any related transfer abroad rely solely on your explicit consent (Articles 5(1) and 9); you may withdraw your consent at any time.

Where the EU General Data Protection Regulation (“GDPR”) applies, the corresponding legal bases are Article 6(1)(b) (contract), 6(1)(c) (legal obligation), 6(1)(f) (legitimate interests) and 6(1)(a) (consent, for analytics cookies).

5. How We Collect Data

Data is collected, partly or fully by automated means, through the project and contact forms on the Site, by email, phone and WhatsApp, in face-to-face or online meetings, and through cookies and server logs.

6. Transfers

We share your personal data only for the purposes above and only to the extent necessary with the providers we use for hosting, email and maintenance, with our accountants and legal advisors, and, upon request, with competent public authorities. We do not sell or rent your personal data to third parties for marketing purposes.

If you consent to analytics cookies, your usage data may be transferred to servers abroad through Google Analytics, provided by Google Ireland Ltd. / Google LLC. This transfer is based on your explicit consent under Article 9 of the PDPL and, where the GDPR applies, on the safeguards offered by Google, including the EU Standard Contractual Clauses. IP addresses are truncated in Google Analytics.

7. Retention Periods

• Requests and correspondence that do not lead to a contract: 2 years from the last contact;
• Contracts, proposals, invoices and accounting records: for the period required by law (generally 10 years under the Turkish Commercial Code and Tax Procedure Law);
• Server and security logs: up to 2 years;
• Analytics data: up to 14 months in Google Analytics.

At the end of these periods, data is deleted, destroyed or anonymized.

8. Cookies and Similar Technologies

Cookies are small text files stored by your browser. The cookies and browser storage used on the Site are:

• Strictly necessary / technical: caching and session cookies that allow pages to be delivered quickly and securely (e.g. LiteSpeed cache cookies). These are required for the Site to work and do not require consent.
• Functional (preferences): ats_lang (your chosen language, 1 year), pll_language (language preference) and ats-theme in your browser’s local storage (light/dark mode preference). These are used only to remember your choices.
• Analytics (consent required): Google Analytics cookies _ga and _ga_* (up to 2 years). They are activated only if you consent.

You can give or change your choice regarding analytics cookies through the banner shown on your first visit to the Site, or at any time via the “Cookie preferences” link at the bottom of every page. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

You can delete or block cookies in your browser settings; blocking strictly necessary cookies may prevent parts of the Site from working properly.

9. Data Security

We apply technical and organizational measures — including encrypted connections (HTTPS), access controls, up-to-date software, regular backups and confidentiality obligations — to protect your data against unauthorized access, loss and misuse.

10. Your Rights

Under Article 11 of the PDPL you have the right to learn whether your data is processed, to request information, rectification, erasure or destruction, to object, and to claim compensation for damages. Details on how to exercise these rights are set out in our PDPL Privacy Notice.

Where the GDPR applies, you also have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing based on legitimate interests, to withdraw consent at any time without affecting the lawfulness of prior processing, and to lodge a complaint with the supervisory authority in your country of residence. To exercise your rights, write to info@artsution.com.tr.

11. Third-Party Links

The Site contains links to third-party services such as Instagram, LinkedIn, Behance, X and WhatsApp. When you follow these links, the respective service’s own privacy policy applies; the Site does not embed content from these services.

12. Changes

We may update this policy to reflect changes in legislation or our practices. The current version is always published on this page together with its last updated date.

13. Language

This policy is also available in Turkish. In case of any discrepancy between the Turkish and English versions, the Turkish version shall prevail.