(Legal)

Privacy Policy and KVKK Notice

Last updated:

1. Data controller

This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform people who visit our website at apexkreatif.com (the "Site") and who contact us. Your personal data is processed as described below by Apex Kreatif ("Apex Kreatif", "we") as data controller.

  • Data controller: Apex Kreatif
  • Email: info@apexkreatif.com
  • Website: apexkreatif.com

2. What personal data do we process?

Our Site has no membership or account system. We process your personal data only in the following cases and to the following extent:

Data categoryDataWhen?
IdentityFirst name, last nameWhen you fill in the contact form
ContactEmail addressWhen you fill in the contact form or send us an email
Request detailsThe service category you choose and the content of your messageWhen you fill in the contact form
Transaction securityIP address, date and time, browser details (server logs)Automatically by our hosting provider when you visit the Site
Usage statisticsPages visited, device and browser type, country (anonymous)When you visit the Site

Please do not share special categories of personal data such as health, religion or ethnic origin in your message; we do not need such data. If it is shared, it is deleted once your request has been answered.

3. How do we collect your data?

  • Contact form: When you fill in the form and tear off the ticket, the details you entered are forwarded to our company mailbox by a script running in our Google Workspace account (Google Apps Script) and may be kept as a record in Google Sheets. Form data is not stored on the Site or in your browser.
  • Email: When you write to info@apexkreatif.com or to the email addresses of our team members.
  • Automatically: When you visit the Site, our hosting provider creates technical records (server logs) automatically, and our statistics tools collect the usage data described below.
  • Social media: When you message our Instagram, TikTok or LinkedIn accounts, that data is subject to the platform's own privacy policy; we use the information you send us only to answer your request.

4. For what purposes and on what legal grounds do we process your data?

PurposeLegal ground (KVKK Art. 5)
Answering your message and quote request, communicating with youDirectly related to entering into a contract (Art. 5/2-c)
Running the business relationship and keeping records when we work togetherPerformance of a contract (Art. 5/2-c) and legal obligation (Art. 5/2-ç)
Keeping the Site secure and preventing misuse and attacksOur legitimate interest (Art. 5/2-f)
Reviewing anonymous visit statistics to improve the SiteOur legitimate interest (Art. 5/2-f)
Requests from authorities and our legal obligationsExpressly provided for by law and legal obligation (Art. 5/2-a, ç)

We do not add your data to marketing lists, send you ads or newsletters without your permission, or sell it.

5. Who do we share your data with, and why?

We share your data only with the following service providers we work with to run our services, and only as far as necessary. These providers process the data on our behalf and under our instructions (as data processors):

RecipientData sharedPurposeLocation
Vercel Inc.Server logs, anonymous statisticsHosting the Site, Site statisticsUSA and servers worldwide
Google (Google Workspace: Gmail, Apps Script, Sheets)Information you send via the form and emailReceiving, forwarding, recording and answering your messagesGoogle's data centres (including the EU and USA)
Competent public authorities and courtsThe data requestedFulfilling legal obligationsTurkey

Transfers abroad: Because the servers of our hosting, email and statistics providers are located abroad, your data may be transferred abroad under Article 9 of the KVKK. These transfers are made with the standard contracts announced by the Personal Data Protection Board and the other appropriate safeguards provided for in the KVKK.

6. How long do we keep your data?

DataRetention period
Contact form and email correspondence (if no business relationship follows)2 years from the last correspondence
Correspondence, quotes and contract records if a business relationship follows10 years from the end of the business relationship (retention and limitation periods under the Turkish Commercial Code and the Turkish Code of Obligations)
Server logs (IP address, etc.)For the hosting provider's log retention period, at most 30 days
Usage statisticsKept as aggregate statistics with no personal data

When the period ends or the reason for processing no longer applies, your data is deleted, destroyed or anonymised. If you ask us to delete your data, we delete it without waiting for these periods; only records we are legally required to keep are retained for the legal period, with restricted access.

7. Your rights under the KVKK

Under Article 11 of the KVKK, you have the right to apply to us to:

  • Find out whether your personal data is processed,
  • Request information about it if it has been processed,
  • Find out the purpose of processing and whether it is used in line with that purpose,
  • Know the third parties in Turkey or abroad to whom it is transferred,
  • Ask for it to be corrected if it is incomplete or inaccurate,
  • Ask for it to be deleted or destroyed under the conditions of Article 7 of the KVKK,
  • Ask for corrections, deletions and destructions to be notified to the third parties the data was transferred to,
  • Object to a result against you arising from analysis exclusively by automated systems,
  • Claim compensation if you suffer damage because of unlawful processing.

8. Requests and deleting your data

To exercise your rights or ask for your data to be deleted, write to info@apexkreatif.com from the email address you previously gave us. It is enough to state your first and last name, your contact details and your request clearly. You can also apply by registered electronic mail (KEP), with a secure electronic signature or in writing.

We may ask for additional information to verify your identity. We will conclude your request within 30 days at the latest, depending on its nature, and free of charge as a rule. If your request is refused or you find the answer insufficient, you can complain to the Personal Data Protection Board.

9. Cookies and statistics tools

Cookies are small text files that the sites you visit store in your browser. They can be used for essential tasks such as keeping a session open, or for non-essential purposes such as measuring visits or showing ads.

Our Site does not currently use cookies; there are no advertising or tracking cookies and we leave nothing in your browser. That is why we do not ask for cookie consent.

The statistics tools we use to improve our Site:

  • Vercel Web Analytics and Speed Insights: Do not use cookies. They show the pages visited, the referring site, browser, operating system, device type and country as aggregate (anonymous) statistics. Your IP address is not stored; a non-reversible hash that resets every day is used to tell visits on the same day apart.
  • Google Search Console: Shows how our site appears in Google Search (the searches we appear in and the number of clicks). It adds no code to our site and collects no data from your device; the data is reported in aggregate from Google's own search records.

You can always delete or block cookies in your browser settings.

10. How do we protect your data?

  • All traffic between the Site and your browser is encrypted with HTTPS (TLS).
  • Form data is not kept in a database on the Site; it is only forwarded to the mailbox and record sheet in our Google Workspace account.
  • Only authorised team members have access to our email accounts and service dashboards.
  • We make contracts with our service providers that safeguard data security and confidentiality.
  • We regularly delete data whose retention period has ended.

11. Other matters

Our Site is not intended for people under 18 and we do not knowingly collect data from them.

When you click external links on our Site such as Instagram, TikTok or LinkedIn, that site's own privacy policy applies.

We may update this notice in line with changes to our services or the law. The current version is always on this page; the date at the top shows when it was last updated.

Questions: info@apexkreatif.com