Privacy Policy and Personal Data Notice
Which personal data is processed on the Piton Studios website, for what purpose and legal basis, to whom it is transferred, how long it is retained, and how you can exercise your rights under the Turkish Personal Data Protection Law (KVKK).
Last updated:
This is an English translation of the Turkish original provided for convenience. In case of any discrepancy, the Turkish version prevails.
This notice has been prepared pursuant to Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about how the personal data of visitors to the Piton Studios website ("Site") and persons who contact us is processed.
In short: the Site does not use a database, does not contain advertising or tracking cookies, and does not sell your data. Information you submit through the contact form reaches us only by email, solely to respond to your request.
Data controller
Your personal data is processed by the person identified below, acting as the data controller.
- Data controller
- Ömer Faruk Güngör
- Trade name
- Piton Studios
- Address
- 4 Eylül Mah. 889. Sk. Karaca Apt. A Blok, Bozüyük / Bilecik, Türkiye
- hi@pitonstudios.com
What personal data we process
| Data category | Data | How is it collected? |
|---|---|---|
| Identity and contact | Full name, email address, phone number (optional) | Contact form, email, WhatsApp or phone |
| Content of your request | Your message, information you share about your project, language preference | Contact form and correspondence |
| Transaction security | IP address, request time, browser and device information | Automatically when you connect to the Site |
| Visit statistics | Pages viewed, referring site, country, device and browser type, page performance metrics | Automatically when you visit the Site |
Please refrain from sharing special categories of personal data (such as health, religious belief or biometric data) in your message or attachments. We do not need such data to respond to your request.
Purposes and legal bases for processing your data
Communication and proposal processes. We process the information you provide through the contact form, email, WhatsApp or phone in order to respond to your request, understand your project, prepare a proposal and communicate with you. The legal basis is that processing is directly related to the establishment of a contract, pursuant to Article 5(2)(c) of KVKK, and our legitimate interest in being able to respond to your request, pursuant to Article 5(2)(f).
Security of the Site. Your IP address is used to limit the number of submissions within a given period, in order to prevent misuse of the form and automated submissions. Our hosting service provider also keeps technical connection logs for the operation and security of the Site. The legal basis is our legitimate interest pursuant to Article 5(2)(f) of KVKK.
Site performance and statistics. We use Vercel Web Analytics and Vercel Speed Insights to understand which pages are visited and how fast pages load. These tools do not use cookies; visitors are distinguished by a value that is not intended to identify you and that expires within a short period. The legal basis is our legitimate interest in improving the Site, pursuant to Article 5(2)(f) of KVKK. For details, see the Cookie Policy page.
Legal obligations. In the event of law-based requests from competent authorities or possible disputes, we may process your data in order to fulfill our legal obligation pursuant to Article 5(2)(ç) of KVKK, and to establish, exercise or protect a right, pursuant to Article 5(2)(e).
We do not use your contact information to send marketing communications without your explicit consent, and we do not sell your personal data. No decision affecting you is made about you based solely on automated systems.
To whom we transfer your data
The Site and its communication infrastructure operate through the following service providers. These providers process your data only to the extent necessary to provide the service.
| Recipient | Service | Data transferred |
|---|---|---|
| Vercel Inc. (USA) | Hosting of the Site, visit statistics and performance measurement | Transaction security and visit statistics data |
| Resend (USA) | Delivery of contact form messages by email | Identity, contact and request data you share in the form |
| Google LLC (USA) | The email service (Gmail) in which incoming contact messages are stored | Data you share in the form and by email |
Aside from the above, your personal data may only be transferred to legally authorized public institutions and organizations where there is a legal obligation, and limited to the scope of that obligation.
When you contact us via WhatsApp, your correspondence is processed on WhatsApp's infrastructure, and WhatsApp's own privacy policy also applies to that processing.
Transfer abroad
Because the servers of the service providers above are located abroad, your personal data is transferred abroad. These transfers are carried out within the framework of the conditions set out in Article 9 of KVKK. With respect to the data you provide through the contact form and email, the transfer is necessary for the pre-contractual negotiations conducted at your request.
How long we retain your data
| Data | Retention period |
|---|---|
| Communication and proposal correspondence that does not turn into a business relationship | 2 years from the last correspondence; deleted at the end of this period |
| Correspondence that turns into a business relationship | For the duration of the contract and the retention periods prescribed by the relevant legislation |
| IP address used for the form submission limit | Only in server memory, for a maximum of 10 minutes; not permanently recorded |
| Hosting and statistics logs | For the periods specified in Vercel's terms of service |
Personal data whose retention period has expired or whose purpose of processing has ceased is deleted, destroyed or anonymized. As the Site does not have a separate database, form data is not stored on the Site.
Your rights under KVKK
Pursuant to Article 11 of KVKK, by applying to the data controller you have the right to:
- Learn whether your personal data is being processed,
- Request information about your personal data if it has been processed,
- Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
- Know the third parties to whom your personal data is transferred domestically or abroad,
- Request correction of your personal data if it has been processed incompletely or incorrectly,
- Request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of KVKK,
- Request that correction, deletion and destruction actions be notified to the third parties to whom your personal data has been transferred,
- Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
- Request compensation for damages if you suffer harm due to the unlawful processing of your personal data.
How to apply
To exercise your rights, you may submit your application in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, through the following means:
- In writing, by a wet-signed petition together with identity-verifying documents, to the address 4 Eylül Mah. 889. Sk. Karaca Apt. A Blok, Bozüyük / Bilecik, Türkiye,
- Signed with a secure electronic signature or mobile signature, or from the email address you have previously notified to us and which is on our records, to hi@pitonstudios.com.
In your application, you must state your name and surname, signature, your Turkish ID number if you are a citizen of the Republic of Turkey (or your nationality and passport number if you are a foreign national), the address to which notice should be sent, your email address and phone number if available, and the subject of your request.
Your application will be concluded free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest. If the transaction also requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, if you find the response inadequate, or if a response is not given within the time limit, you may file a complaint with the Personal Data Protection Board pursuant to Article 14 of KVKK.
If you are located in the European Economic Area, you may also submit your requests regarding your rights under the General Data Protection Regulation (GDPR) through the same channels.
Changes
We may update this notice when our data processing activities or legislation change. The current text is always published on this page, and the update date at the top of the page is changed accordingly. For the general conditions governing use of the Site, see the Terms of Use page.