Personal Data Processing Information Notice

1. Identity of the data controller

The data controller under Personal Data Protection Law No. 6698 is MERTCAN ALTUNIŞIK. Contact address: Çaybaşı Mahallesi, Furgandede Caddesi, Larende İş Hanı, Floor 5, No. 506, Meram/Konya; email: info@altunisikco.com; phone: +90 (530) 345 78 01.

2. Categories of data processed

• Identity and contact information: full name, authorised contact, email, phone and address.
• Customer transaction information: enquiries, proposals, orders, agreements, packages, briefs, meetings, revisions and support records.
• Finance and billing information: business name, tax office, tax or identity number, billing address, payment and refund status. ALTUNIŞIK Co. does not store card data.
• Project content: brand information, goals, uploaded files and delivery records.
• Transaction security information: sessions, authentication, timestamps, errors and abuse-prevention records.

3. Purposes and legal grounds for processing

Data is processed to respond to enquiries, prepare proposals and contracts, deliver services, manage payments and billing, operate the client dashboard, communicate about projects, meet legal obligations, establish or defend rights in disputes, and maintain information security.

• Direct relevance to establishing or performing a contract.
• Compliance with the data controller’s legal obligations.
• Establishment, exercise or protection of a right.
• Legitimate interests, provided fundamental rights and freedoms are not harmed.
• Separate, freely given explicit consent where specifically required by law.

4. Collection methods

Data is collected electronically or physically through web forms, Vizyoner needs assessments, pre-payment forms, the client dashboard, email, phone, WhatsApp Business, meetings, contracts and project delivery. Optional marketing consent is not a condition of service.

5. Recipients of transfers

Where necessary and limited to the purpose, data may be transferred to PayTR for payments, Ödeal for invoicing, Google Workspace for communications and meetings, hosting and file-storage providers, accounting and legal advisers, and authorised public bodies. No transfer takes place through an inactive integration.

6. International transfers

Where Google Workspace or cloud infrastructure uses systems outside Türkiye, the transfer mechanism, provider agreements and technical arrangements are assessed and kept current in line with applicable legislation.

7. Retention and disposal

Data is retained for as long as necessary for the processing purpose and applicable statutory retention periods, then securely deleted, destroyed or anonymised. Project files and operational records follow the company’s retention and disposal schedule.

8. Data subject rights and requests

Requests under Article 11 of the Personal Data Protection Law may be sent to info@altunisikco.com or Çaybaşı Mahallesi, Furgandede Caddesi, Larende İş Hanı, Floor 5, No. 506, Meram/Konya with information sufficient to verify identity. Requests are resolved free of charge as appropriate to their nature and within thirty days at the latest. The statutory tariff may apply if processing requires additional cost.

• Learn whether your data is processed and request information.
• Learn the processing purpose and whether the data is used accordingly.
• Know the third parties receiving your data.
• Request correction of incomplete or inaccurate data and, where conditions are met, its deletion or destruction.
• Seek compensation for damage caused by unlawful processing.