Personal Data Notice

1. Controller and scope

The company identified on this page operates the Creativo brand and is the data controller. This notice covers website visitors, people requesting quotes and customer representatives whose data is processed through the website.

2. Information and collection

The quote form collects your name, email, selected service and project description. You may also provide a phone number, company, budget, existing website, goals and preferred start date. Request dates, references, statuses and follow-up notes may be kept to manage the enquiry. Information is collected electronically through the form and subsequent written correspondence. Please do not submit sensitive personal data, passwords or payment card details.

Session information and a protected value derived from your IP address help prevent abuse. Hosting access logs may contain IP addresses, request times and browser details. Browser storage is described in the Cookie Policy.

3. Purposes and legal grounds

Under Turkish Law No. 6698, enquiry and contract discussions rely on Article 5(2)(c) where directly necessary for your contract; mandatory records and official requests on 5(2)(ç); claims-related records on 5(2)(e). Security and business enquiry administration may rely on legitimate interests under 5(2)(f), subject to fundamental rights. Submitting a form is not marketing permission.

4. Recipients and transfers

Authorised company staff access information as required for their duties. Hosting and technical support providers, professional advisers and competent public authorities may receive information where necessary for the stated purposes. Data is not sold as advertising lists. Any service requiring international transfers must meet Article 9 requirements, with this notice updated accordingly.

5. Retention and safeguards

Records are retained as necessary to handle the enquiry, meet applicable legal obligations and protect legal rights. They are deleted, destroyed or anonymised when the grounds for processing end. Access permissions are restricted and the application uses session, form-validation and abuse-prevention measures.

6. Your rights and requests

Article 11 provides rights to learn about processing, purposes and recipients; request correction, qualifying erasure or destruction and notification to recipients; object to adverse outcomes of exclusively automated analysis and seek compensation for unlawful processing.

Send a request identifying yourself and explaining your request in writing to the address below, or from an email previously supplied to us and registered in our system to the email below. Other statutory application methods remain available. Requests are answered within 30 days.