This notice is given under Article 10 of the Turkish Personal Data Protection Law no. 6698 (KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, to inform the visitors of ee İstanbul (www.ee-istanbul.com). See also the Privacy Policy page for more detail.

1. Data controller

The data controller is ee İstanbul Proje Tasarım Yönetim ve Danışmanlık Ltd. Şti..

Address: İçerenköy Mahallesi Çayır Caddesi Ayplaza No:2 Kat:3, Ataşehir / İstanbul
Email: info@ee-istanbul.com
Phone: +90 216 573 08 08

2. Personal data processed and purposes

2.1 Delivering the pages

Your IP address and technical request data (requested address, time, browser type). Purpose: delivering the site and protecting it against attacks and abuse. Hosting request logs are kept for about 30 days.

2.2 Visit statistics

Page views without identifiers: page address and title, referring page, page language, screen and window size. Only if you allow analytics in the cookie banner, also a random visitor ID and session ID. Purpose: counting which pages are read and whether visits repeat. Events with IDs are kept for 400 days; statistics aggregated from them for up to 1,100 days. Your IP address and browser user-agent are not stored with these events.

2.3 Cookie choice record

Random consent ID, the categories you allowed, policy version, time, your browser user-agent and a salted one-way hash of your IP address. Purpose: being able to demonstrate the consent given. The record is kept for 365 days plus 3 years.

2.4 Contact and request forms, email

The details the forms ask for (your first name, surname, phone number, email address and message) and the information you send us by email. Purpose: answering and assessing your request.

2.5 Job applications

The details the careers form asks for (your name, phone number, email address) and the CV you upload. Purpose: assessing your application and contacting you.

2.6 Email newsletter

Your email address and the place and time of the sign-up. Purpose: sending the updates announced in the form. If you unsubscribe, a minimal record is kept so that you are not emailed again.

2.7 Embedded third-party content

When you view embedded Google Maps content on some pages, the provider receives your IP address and browser details itself. We do not send this data to these providers.

3. Legal grounds

• Delivering the pages and visit statistics without identifiers: the legitimate interest of the data controller (KVKK Art. 5/2(f)).
• Visitor and session IDs (analytics): your explicit consent (KVKK Art. 5/1).
• Cookie choice record: legal obligation to prove consent (KVKK Art. 5/2(ç)).
• Contact and request forms, email: steps you ask us to take (KVKK Art. 5/2(c)) and the legitimate interest in answering requests (KVKK Art. 5/2(f)).
• Job applications: steps you ask us to take (KVKK Art. 5/2(c)) and the legitimate interest in contacting you when a suitable position opens (KVKK Art. 5/2(f)).
• Email newsletter: your explicit consent (KVKK Art. 5/1).
• Embedded third-party content: the legitimate interest in displaying the content of the site (KVKK Art. 5/2(f)).

4. Method of collection

Your data is collected by automated means: when you visit the site and through your browser storage (cookies, localStorage, sessionStorage). Forms and email are partly automated: you provide the information and the system passes it to us.

5. Transfer of personal data

Within Turkey: your personal data is not transferred to recipients in Turkey; where the law requires it, notification may be made to competent public bodies.

Abroad: the site runs on the CIQRA platform operated by CIQRA OÜ (Estonia), which processes the data only on our behalf and on our instructions (as processor). The data is hosted in Microsoft Azure data centres in Germany (EU). Cloudflare, Inc., which delivers the pages and protects the site, and our email service provider may also access your data. Your data is therefore transferred abroad; the transfer is limited to what is needed to run the site and is assessed under KVKK Art. 9. No one else receives your data and it is not sold.

6. Your rights (KVKK Art. 11)

By applying to the data controller you can:

• a) learn whether your personal data is processed,
• b) request information if it has been processed,
• c) learn the purpose of processing and whether it is used accordingly,
• ç) know the third parties to whom it is transferred in Turkey or abroad,
• d) ask for correction if it is incomplete or inaccurate,
• e) ask for deletion or destruction under the conditions of KVKK Art. 7,
• f) ask that the actions under (d) and (e) be notified to the third parties to whom the data was transferred,
• g) object to a result against you arising from analysis exclusively by automated systems,
• ğ) claim compensation if you suffer damage because of unlawful processing.

7. How to apply

Send your requests in writing to the address above or to info@ee-istanbul.com.
Applications are handled under the Communiqué on the Procedures and Principles of Applications to the Data Controller and answered free of charge within 30 days at the latest, depending on the nature of the request.

8. Complaint to the Board

If your application is rejected, you find the answer insufficient or no answer is given in time, you can complain to the Personal Data Protection Board (www.kvkk.gov.tr) under KVKK Art. 14 within 30 days from learning the answer and in any case within 60 days from the date of the application.