Personal data protection notice

Data controller

This notice has been prepared under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) by Ali Rıza Karahasanoğlu (“Karahasanoğlu Medya”, “we”) as data controller. Karahasanoğlu Medya is a brand and trade name operated by Ali Rıza Karahasanoğlu.

• Address: Kavacık, Sanal Sk. No:34 Daire:1, 34810 Beykoz/İstanbul, Türkiye
• E-mail: info@karahasanoglumedya.com
• Phone: +90 532 177 98 08

Which personal data do we process?

We process only the data needed to serve you, to the extent you share it with us:

• Identity data: your first and last name.
• Contact data: your phone number, e-mail address and the company you work for.
• Request and project data: the messages you send us, the service you are interested in, project timing and correspondence about the quote.
• Visual and audio recordings: photos, video and sound recorded under contract during shoots we do together.
• Customer transaction data: quotes, contracts, invoices and payment details.
• Transaction security data: records such as IP address, browser type and time of visit that the hosting service keeps for technical reasons when you visit the site.
• Marketing and measurement data: only if you consent, usage information collected by analytics and advertising cookies (details in our cookie policy).

How do we collect your data?

We collect your personal data by automated or partly automated means when you contact us by WhatsApp, phone or e-mail, when you fill in a form on the site and send your message via WhatsApp or e-mail, in face-to-face meetings, during contract and shooting processes, and when you visit the site.

When you submit the Contact or Get a quote form on the site, the information you enter (your name, company, phone or e-mail, message and choices) is saved in a Supabase database so your request is not lost, and is also sent to us through your WhatsApp or e-mail app. Only we can access these records.

For which purposes do we process it?

• To answer your requests and questions and prepare quotes for you,
• To conclude and perform the contract and carry out shooting, editing, delivery and revisions,
• To meet invoicing, accounting and statutory retention obligations,
• To keep the site secure and fix technical problems,
• If you consent, to measure how the site is used and show our ads to relevant people,
• To protect our rights in legal disputes and respond to requests from competent authorities.

Legal grounds

We process your personal data on the following legal grounds listed in Article 5 of the KVKK:

• Conclusion and performance of a contract (Art. 5/2-c): quotes, contracts, shoots and delivery.
• Legal obligation (Art. 5/2-ç): retention obligations under invoicing, accounting and tax law.
• Establishing, exercising or protecting a right (Art. 5/2-e): possible disputes.
• Legitimate interest (Art. 5/2-f): answering your requests, site security and communication records.
• Explicit consent (Art. 5/1): analytics and advertising cookies, and use of personal images for promotion unless separately covered in the contract.

To whom do we transfer your data?

We do not sell your personal data. For the purposes above and only as needed, we may share it with:

• Service providers for website hosting, e-mail and cloud storage,
• The Supabase database service where form requests are stored (servers in Frankfurt, Germany),
• Messaging services we use for communication, such as WhatsApp (Meta),
• If you consent, Google Tag Manager and Google Analytics 4 (Google Ireland Ltd. / Google LLC; analytics data kept for 14 months), and if you give advertising consent, the Meta Pixel (Meta Platforms Ireland Ltd.); Google Ads may be added in the future,
• Business partners on a project who are bound by confidentiality (e.g. film crew, voice-over artists),
• Our accounting and legal advisers,
• Public authorities and courts authorised by law.

Some of these service providers have servers outside Türkiye. Transfers abroad are made in line with the conditions in Article 9 of the KVKK (such as standard contracts or your explicit consent). Transfers abroad for Google Analytics and the Meta Pixel rely solely on the explicit consent you give in the cookie banner; if you do not consent, these tools do not run at all.

How long do we keep it?

We keep your data for as long as needed for the purpose it was processed for and for the periods required by law. Contract, invoice and accounting records are kept for the periods set by the Turkish Commercial Code and the Tax Procedure Law (generally 10 years). Correspondence that does not go beyond the quote stage is deleted a reasonable time after the last contact. Data whose period has expired is deleted, destroyed or anonymised.

Your rights under the KVKK

Under Article 11 of the KVKK, you have the right to apply to us to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of processing and whether it is used for that purpose,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Ask for it to be corrected if it is incomplete or inaccurate,
• Ask for it to be deleted or destroyed under the conditions in Article 7 of the KVKK,
• Ask that corrections, deletions and destructions be notified to the third parties it was transferred to,
• Object to a result against you arising solely from analysis by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

You can withdraw any explicit consent you have given at any time.

How can you apply?

To exercise your rights, you can send your request in writing, with information that verifies your identity, to Kavacık, Sanal Sk. No:34 Daire:1, 34810 Beykoz/İstanbul, Türkiye, or from the e-mail address registered with us to info@karahasanoglumedya.com. We will conclude your request free of charge as soon as possible and within 30 days at the latest, depending on its nature. If you are not satisfied with our answer, you can file a complaint with the Turkish Personal Data Protection Board (KVKK Kurulu).