Privacy Notice

The data controller under the KVKK is DEXA Digital Studio, based in Istanbul, Türkiye. For any questions or requests regarding your personal data, you can contact us at hello@dexastudio.dev.

Depending on how you use our website, the following personal data may be processed:

• Identity data: First and last name.
• Contact data: Email address and, if you provide it, phone number.
• Professional data: Company or brand name, if you provide it.
• Request data: The services you are interested in, budget range, project details, the page from which you submitted the form and your language preference.
• Transaction security data: IP address, browser information and access logs (server logs kept by our hosting provider).
• Usage data: Only if you accept cookies, analytics data such as pages visited, links clicked, and device and browser type.

• Evaluating your quote and contact requests, responding to you and preparing proposals,
• Carrying out the contract process for the services you request,
• Keeping the website secure and preventing misuse (such as spam),
• If you consent, analyzing and improving the website's performance and user experience.

Your personal data is collected electronically through the contact form on our website and through cookies and similar technologies, by fully or partially automated means. Your data is processed on the following legal bases:

• Contact form data: Processing is directly related to the conclusion or performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)),
• Transaction security data: Processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)),
• Usage data collected through analytics cookies: Your explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)). You can withdraw your consent at any time through the cookie preferences.

Your personal data may be transferred to the following service providers, limited to the purposes above:

• Google LLC (Google Workspace): Storing contact form data and delivering notification emails; if you consent, analytics through Google Tag Manager and Google Analytics,
• Vercel Inc.: Hosting the website and keeping server logs.

As these providers' servers are located abroad (primarily in the United States), your data is transferred abroad within the scope of Article 9 of the KVKK. Transfers rely on the appropriate safeguards provided for in the law (standard contracts) or, where this is not possible and the transfer is incidental, on the explicit consent you give in the contact form. For visitors in the EEA and the UK, transfers rely on the providers' standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

Your personal data may also be shared with authorized public institutions upon request, in accordance with the applicable legislation. Apart from this, your data is never sold to third parties or shared for marketing purposes.

Data submitted through the contact form is kept until your request is concluded and, if no contract is concluded, for a maximum of 2 years. If a contract is concluded, the retention periods set out in the applicable legislation apply. At the end of the period, your data is deleted, destroyed or anonymized. The retention periods of analytics cookies are listed in the Cookie Policy.

Under Article 11 of the KVKK, by contacting the data controller you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether your data is used in line with that purpose,
• Know the third parties in Türkiye or abroad to whom your personal data is transferred,
• Request the correction of incomplete or inaccurate data,
• Request the deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
• Request that corrections, deletions or destructions be notified to the third parties to whom your data has been transferred,
• Object to any result to your detriment arising from the analysis of your data exclusively through automated systems,
• Claim compensation for damages arising from the unlawful processing of your personal data.

If you are located in the EEA or the UK, you can also exercise your rights under the GDPR, including the rights of access, rectification, erasure, restriction of processing, data portability and objection, and you have the right to lodge a complaint with your local data protection authority.

You can send requests regarding your rights by email to hello@dexastudio.dev, together with information that allows us to verify your identity, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Requests are concluded free of charge as soon as possible and within 30 days at the latest, depending on their nature. If a request involves an additional cost, a fee may be charged according to the tariff set by the Turkish Personal Data Protection Board.