Privacy Policy

1. Scope

This Privacy Policy sets out the general principles regarding the protection of the confidentiality and security of personal data obtained during the use of the website operated by Yaklaşım Mimarlık ve Yapı A.Ş.. This policy covers the general explanations relating to the processing of personal data of users visiting our website, persons contacting us through the contact form, and persons requesting information about our services through the website. Personal data is processed in accordance with the principles and conditions set out in Law No. 6698 on the Protection of Personal Data ("KVKK") and the relevant legislation. Personal data obtained during the use of our website is processed solely for specific, explicit and legitimate purposes, and in a manner that is connected, limited and proportionate to the purpose of processing. Detailed information about the purposes for which personal data is processed, the legal grounds relied upon, to whom and for what purposes it may be transferred, and the rights of data subjects is set out in the Personal Data Protection Notice published separately on our website. This Privacy Policy has been prepared to explain our approach and core practices regarding the protection of personal data.

2. Information We Collect

During your visit to our website and use of our services, certain information may be collected depending on the nature of the services provided and the transactions you carry out. The information that may be collected includes name and surname, telephone number, e-mail address, address details, requests and messages you submit, and information you share within the scope of your project or service requests. In addition, technical information such as IP address, browser and device information, access records and similar data may be processed in order to ensure the security of the website and to operate it technically. Information relating to your use of our website may be collected depending on the nature of the cookies used and on your preferences. Details regarding the use of cookies are explained separately in our Cookie Policy. Information and documents voluntarily shared with us for the purpose of contacting us are processed solely for the purpose of conducting the relevant communication or service process and in accordance with the relevant legislation. Detailed information about the purposes for which your personal data is processed, the legal grounds, the persons and institutions to whom it may be transferred, and the rights you hold is set out in our Personal Data Protection Notice.

3. Purposes of Use

Information collected through our website may be used solely for the following purposes:

• —Receiving, evaluating and responding to contact requests,
• —Responding to requests for information about our project, architectural design, interior architecture, consultancy and other services,
• —Conducting proposal, contract and business processes,
• —Establishing and conducting customer and business relationships,
• —Ensuring the security of the website and operating its technical infrastructure,
• —Improving the performance and user experience of the website,
• —Ensuring information security and preventing unauthorised access or misuse,
• —Fulfilling legal obligations arising from the relevant legislation,
• —Responding to legally valid requests from authorised public institutions and organisations,
• —Fulfilling other legal obligations set out in the legislation on the protection of personal data.

Personal data is not used outside the purposes stated above or in a manner contrary to the relevant legislation.

4. Information Sharing and Third Parties

Personal data obtained through our website may be shared with third parties only where the conditions set out in the relevant legislation are met and limited to the purposes of processing. In this context, personal data may be shared with suppliers and service providers from whom we receive services for the purpose of conducting services and operating the technical infrastructure; where necessary, with business partners and consultants; and with public institutions and organisations authorised by law or private persons and organisations legally authorised. The transfer of personal data to third parties is carried out in accordance with the conditions set out in the relevant provisions of Law No. 6698 on the Protection of Personal Data. Where transfer is necessary, the data to be transferred is determined in a manner connected, limited and proportionate to the purpose. Where personal data is to be transferred to persons or organisations abroad, such transfer is carried out in accordance with the provisions of the KVKK on transfers abroad. Personal data is not shared with third parties outside the determined purposes unless there is a legal obligation or a situation requiring the explicit consent of the data subject.

5. Data Security

In order to prevent the unlawful processing of, access to, loss of, or unauthorised acquisition of your personal data, appropriate technical and administrative security measures are implemented taking into account the nature of the data processed and the associated risks. In this context, access to personal data is limited to those who need it within the scope of their duties and authority; access control, authorisation, secure data processing and storage practices and other necessary technical and administrative measures are applied to ensure information security. Security risks in the systems and environments in which personal data is processed are regularly assessed and the measures deemed necessary are updated. In the event that personal data is obtained by third parties through unlawful means or a data security breach occurs, the notification and other obligations set out in the relevant legislation are fulfilled. The data security measures taken are updated where deemed necessary in line with technological developments, the nature of activities and the risks that may arise.

6. Retention Periods

Your personal data is retained taking into account the periods set out in the relevant legislation and the maximum period necessary for the purpose for which it is processed. In determining the retention period, matters such as the purpose of processing, the continuation of the legal or commercial relationship established with the data subject, legal obligations, limitation periods and the need for data in possible legal disputes are taken into account. Where the processing purposes or legal grounds requiring the retention of personal data cease to exist, the data is deleted, destroyed or anonymised in accordance with the relevant legislation. Personal data that must legally be retained for a longer period is kept for the period specified in the relevant legislation. The retention period is assessed according to the nature of each data processing activity. Retention and destruction processes for personal data are conducted in line with the applicable legislation and related regulations.

7. User Rights

Natural persons who use our website and whose personal data is processed have the following rights under Article 11 of Law No. 6698 on the Protection of Personal Data:

• —To learn whether their personal data is being processed,
• —To request information if their personal data has been processed,
• —To learn the purpose of processing and whether the data is used in accordance with that purpose,
• —To know the third parties in Türkiye or abroad to whom their personal data has been transferred,
• —To request the correction of personal data that has been processed incompletely or incorrectly,
• —To request the deletion or destruction of their personal data within the conditions set out in the KVKK,
• —To request that any correction, deletion or destruction be notified to the third parties to whom the data has been transferred,
• —To object to an outcome against them arising from the analysis of their processed data exclusively by automated systems,
• —To claim compensation if they suffer loss due to the unlawful processing of their personal data.

Requests relating to these rights may be submitted by applying to the data controller under the KVKK. Applications are evaluated and concluded within the procedures and time limits set out in the relevant legislation.

8. Children's Privacy

Our website attaches particular importance to the protection of children's personal data and privacy. No service or content specifically designed for children is offered through our website, and it is not intended to collect personal data directly from children. Where personal data belonging to children is submitted to us within the scope of any communication, project or service process, such data is processed only to the extent necessary to conduct the relevant process and in accordance with Law No. 6698 on the Protection of Personal Data and the relevant legislation. In processing children's personal data, the nature of the data, the purpose of processing and the data processing conditions set out in the relevant legislation are taken into account. Where explicit consent is required, legally valid explicit consent and the necessary information processes are provided. If it is identified that children's personal data has been processed or collected unlawfully, the necessary review and corrective actions are carried out within the framework of the relevant legislation.

9. Policy Changes

This Privacy Policy may be updated in line with changes in the applicable legislation, decisions of the Personal Data Protection Board, and changes in our company's practices or in the technical infrastructure of our website. Changes to the Policy take effect upon publication of the current text on our website. The current Privacy Policy is always kept accessible through our website. Where significant changes are made and deemed necessary, users may also be notified separately. The Privacy Policy and the Personal Data Protection Notice under the KVKK are separate documents; the legal obligations to provide information regarding the processing of personal data are fulfilled separately.