Privacy Notice on the Processing of Personal Data
Last updated: 28 October 2026
1. Data Controller
The data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") is EMBD TEKNOLOJİ SAN. TİC. LTD. ŞTİ. ("ADASTYLESTUDIO").
Address: Kulaksız Mah. Kadı Mehmet Cad. Güven Apt. Blok No: 51/1A İç Kapı No: 1, Beyoğlu / İstanbul · Tax Office/No: Kasımpaşa V.D. / 333 149 2578 · Trade Registry No: İTO 138025-5 · MERSİS: 0333 1492 5780 0001 · Email: [email protected]
2. Personal Data We Process
- Consultation form: full name, brand/company name, email address, phone (optional), service of interest, subject and message, and the language of the form. If we correspond, the email correspondence and any files you share.
- Store orders: full name, company name (optional), email address, order and payment record (your card details never reach us; they are processed by the payment institution), the Pre-information Form and Distance Sales Contract you accepted and when, the IP address at the time of the order, and download records (time and IP address). Your name, email address and order number are printed on the pages of the file you download.
- Mailing list (only with your explicit consent): email address, name, when and where consent was given and the wording you accepted.
- Security logs: IP address, browser information and request time (spam and abuse prevention, admin-panel security logs).
- Analytics (only with your explicit consent): a randomly generated persistent visitor ID, session ID, a device fingerprint (a value derived from screen and browser characteristics), pages visited and time on page, referring site and campaign (UTM) parameters, device/browser/OS type, language, approximate country/city derived from your IP address, and an irreversible hash of your IP address.
3. Purposes and Legal Bases
| Purpose | Legal basis (KVKK Art. 5) |
|---|---|
| Receiving your consultation request, replying, and handling the quotation and contract process | Necessary for entering into or performing a contract (Art. 5/2-c) |
| Sending an automatic confirmation email | Necessary for entering into a contract (Art. 5/2-c) |
| Taking your store order, verifying payment, delivering the file, sending order confirmation and verification-code emails | Necessary for entering into or performing a contract (Art. 5/2-c) |
| Keeping invoice, contract and order records | Legal obligation (Art. 5/2-ç) |
| Enforcing the download limit and preventing unauthorised sharing of files (buyer details printed on the file, download records) | Our legitimate interest (Art. 5/2-f); protection of a right (Art. 5/2-e) |
| Sending emails about new designs and announcements | Explicit consent (Art. 5/1) and opt-in under Law No. 6563. You can unsubscribe at any time via the link in each email or by writing to us. |
| Protecting the form and site against spam, bots and abuse; system security | Our legitimate interest (Art. 5/2-f) |
| Meeting legal obligations and protecting our rights in disputes | Legal obligation (Art. 5/2-ç); establishment, exercise or defence of a right (Art. 5/2-e) |
| Measuring site visits and ad campaign performance (analytics) | Explicit consent (Art. 5/1). You can withdraw it at any time via "Cookie Preferences". |
4. How We Collect Data
Electronically, through the consultation form, the store order and subscription forms on our website, email correspondence and, with your consent, our analytics tool running in your browser.
5. Transfers, Including Abroad
We share personal data only for the purposes above, with these service providers:
- Vultr (hosting; servers in Madrid, Spain): infrastructure storing the site, form submissions and analytics data.
- Brevo (email delivery; EU): sending notification and reply emails.
- Cloudflare (Turnstile bot protection and content delivery; USA/global): protecting the form against bots and delivering the site securely.
- Licensed payment institution (store orders): taking card payments; only the order and contact details needed for the payment are shared.
Because the servers of the hosting, email and security providers we use are located outside Türkiye, your personal data is transferred to these providers (Vultr – Spain, Brevo – EU, Cloudflare – global). Data may also be disclosed to legally authorised public authorities upon request and as required by law.
6. Retention
- Consultation form and correspondence: automatically deleted 2 years after the last message.
- Paid orders, accepted contract texts and invoice records: for the period required by commercial and tax law (10 years).
- Unpaid or cancelled orders: deleted automatically after 30 days. File copies carrying buyer details: deleted after 7 days and recreated when needed.
- Mailing list: until you withdraw your consent.
- Analytics records: 90 days, then deleted automatically.
- Security/audit logs: 180 days, then deleted automatically.
After these periods, data is deleted, destroyed or anonymised.
7. Your Rights (KVKK Art. 11)
You have the right to:
- learn whether your data is processed, and request information about it;
- learn the purpose of processing and whether data is used accordingly;
- know the third parties it is transferred to;
- request correction of incomplete or inaccurate data, request deletion or destruction under KVKK Art. 7, and have these actions notified to recipients;
- object to an outcome against you resulting solely from automated analysis;
- claim compensation for damage caused by unlawful processing.
8. How to Apply
Send your request with information identifying you to [email protected], or in writing to Kulaksız Mah. Kadı Mehmet Cad. Güven Apt. Blok No: 51/1A İç Kapı No: 1, Beyoğlu / İstanbul. Requests are answered free of charge within 30 days at the latest.