Privacy Policy

Data controller

Your personal data is processed by Universal & Partners SMMM A.Ş. as data controller within the meaning of Turkish Law No. 6698 on the Protection of Personal Data (the “Data Protection Law”).

Personal data processed

The site has no membership or registration. Only the following data is processed:

Contact form data

If you complete the form: your name, email address, subject and message. Completing these fields is entirely voluntary.

Technical connection records

The hosting server keeps standard records — IP address, date and time, requested address, browser and operating system — for security and error monitoring.

Browser preferences

Your response to the cookie notice and your language choice are stored only in your own browser and are not transmitted to us. See the Cookie Policy for details.

The site uses no analytics software, social-media trackers or third-party advertising code for advertising, profiling or visitor tracking. Assets, including fonts, are served from our own server.

Purposes of processing

• Responding to messages received and assessing press and collaboration enquiries
• Keeping the site operational, secure and accessible, and detecting errors and misuse
• Remembering your language and cookie preferences on subsequent visits
• Fulfilling retention and disclosure obligations arising from legislation

Legal bases

Processing is based on the following legal grounds set out in Article 5 of the Data Protection Law:

• For the contact form: the legitimate interest of the data controller, provided it does not harm fundamental rights and freedoms — namely responding to your enquiry
• For technical records: compliance with the controller's legal obligations and its legitimate interest — information security
• For browser preferences: your explicit consent (the cookie notice)

Transfers

Your personal data is never sold, rented or shared with third parties for marketing purposes. Transfers occur only in the following cases and are limited to their purpose:

• The hosting provider (server and domain services) — in order to keep the site online
• The form service that delivers the contact form and our email provider — in order for your message to reach us
• Authorised public institutions — where a request or obligation arises from legislation

Where a service provider's servers are located abroad, any transfer is carried out in accordance with the conditions in Article 9 of the Data Protection Law.

Retention periods

• Messages sent through the contact form: at most 2 years from the end of the correspondence
• Server connection records: for the periods prescribed by legislation, at most 2 years
• Browser preferences: only on your own device, until you delete them

At the end of these periods the data is deleted, destroyed or anonymised.

Data security

The site is served over HTTPS and traffic is encrypted. Data collection is kept to a minimum and access is limited to those who need it for their duties. Even so, no transmission over the internet is completely secure; we recommend not sharing sensitive information through the form unless it is necessary.

Your rights

All of your rights under Article 11 of the Data Protection Law, and how to exercise them, are set out in detail on the Data Protection Notice page.

Changes

This policy may change as a result of amendments to legislation or updates to how the site works. The current version is always published on this page; the date at the top shows the last update.

Contact

For questions about this text and for applications under the Data Protection Law, you can write to [email protected] or call +90 212 241 38 00.