Privacy Statement
Last updated: 17 October 2026
Data controller
The data controller under Turkish Personal Data Protection Law No. 6698 is Deniz Ar Studio — Nazlı Deniz Bayraktaroğlu AR. Address: Şirinyalı Mahallesi, 1489 Sokak, No: 8/A, Muratpaşa / Antalya, Türkiye. Contact: [email protected]. This notice covers site visitors and people submitting contact or bespoke inquiries.
Data and collection methods
Name, email, project type, message and optional images are collected directly from you through forms or email. Connection time, IP address and technical error data may arise in hosting/email infrastructure for operation and security. If a sale is concluded, necessary delivery, billing and order details are collected separately. The inquiry form does not request sensitive personal data or payment-card details.
Purposes and legal grounds
Data is processed to answer inquiries, prepare quotes, conduct contract discussions, fulfil agreed services, comply with legal duties, establish or protect rights and prevent abuse. Depending on the activity, Article 5(2) grounds concerning contract formation/performance, legal obligations, rights and legitimate interests that do not harm your fundamental rights are assessed. Where these grounds do not apply to optional processing, separate freely given consent is obtained when required.
Recipients and transfers
Data may be shared only as necessary with authorised studio personnel; hosting, technical-support and email providers; relevant payment, accounting and delivery services if a sale occurs; and legally authorised bodies. Transfers to providers abroad require the applicable legal conditions and safeguards under Article 9. Personal data is not sold for marketing purposes.
Retention and security
Data is retained only as necessary to handle the inquiry or contract and meet applicable statutory retention or legal-claim periods. It is deleted, destroyed or anonymised when its purpose and legal basis cease. Access is restricted and appropriate technical and organisational safeguards are applied.
Your rights and requests
Under Article 11 you may learn whether data is processed, request information, learn purposes and recipients, seek correction or statutory deletion/destruction, request notification of such actions to recipients, object to adverse outcomes of solely automated analysis and seek compensation for unlawful processing. Submit requests in accordance with applicable identity-verification and application rules to [email protected] or the business address. Requests are handled within 30 days; fees may apply only where permitted by law.
Contact and updates
This notice does not make contact services conditional on marketing consent. The notice is updated if processing changes. For questions, contact [email protected].