Privacy notice

Controller

İsmail Ayşad Güdekli - Redesign Ajans (sole proprietorship)

Address

Pınarbaşı Mah. Hürriyet Cad. Akdeniz Üniversitesi Uluğbey Ar-Ge 2 No: 3A İç Kapı No: B98, Konyaaltı / Antalya, Türkiye

Email

[email protected]

Phone

+90 505 495 10 35

• Contact form: your name, email address, phone number (optional), company, project type, budget range, your message and the language of the page from which you sent the form. To limit repeated submissions, your IP address and email address are kept in memory for no more than 10 minutes and are not saved.
• Email and phone correspondence: what you write to us and your contact details.
• Technical logs: IP address, browser and device information, the page requested and the time. They are kept by our server and our content delivery network for the security and operation of the site.
• Visitor statistics: how many people view which pages, in aggregated form and without identifying individual visitors (Cloudflare Web Analytics). No cookies are used for this.
• Redesign Akademi login: when you enter a valid code, a session cookie is stored in your browser. To block repeated incorrect attempts, your IP address is kept in memory for no more than 15 minutes and is not saved.

You are not required by law or by contract to provide your data. Without your name, email address and message, however, we cannot reply to your enquiry.

• Replying to your enquiry, preparing a quote and carrying out our work together: steps prior to entering into a contract and performance of a contract (Article 6(1)(b) GDPR), and our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).
• Security of the site, prevention of misuse and technical operation: our legitimate interest in a secure and working website (Article 6(1)(f) GDPR). Where Turkish law requires us to keep or disclose data, we rely on our legitimate interest in complying with the legal obligations that apply to us (Article 6(1)(f) GDPR).
• Improving the site with visitor statistics: our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR).

We do not use your data for marketing, we do not send bulk email and we do not sell your data. None of our processing is based on your consent, and we do not use automated decision-making or profiling.

We collect data directly from you, through the forms on the site and the emails you send us. Technical logs are collected automatically when you visit the site.

• Hosting: the site and form submissions are stored on servers in Türkiye (Oweb Bulut İnternet Hizmetleri A.Ş., İstanbul).
• Email: form notifications and correspondence are handled through Google Workspace (Google). This service may process data in other countries, including outside the EEA and the UK.
• Content delivery and security: the site is delivered through the Cloudflare network; technical logs and visitor statistics are processed by Cloudflare. This service may process data in other countries, including outside the EEA and the UK.
• Video: videos on the site are shown through Vimeo with tracking disabled. When a video loads, your IP address is transmitted to Vimeo.
• Public authorities with legal powers: only where there is a legal obligation to disclose data.

The controller and our hosting provider are based in Türkiye, so your data is processed in Türkiye. There is no adequacy decision of the European Commission and no UK adequacy regulation for Türkiye, which means the level of data protection may differ from that in the EEA and the UK. In Türkiye, our processing is governed by the KVKK.

Where Google or Cloudflare process data outside the EEA and the UK, this is based, where applicable, on appropriate safeguards such as standard contractual clauses or the EU-US Data Privacy Framework and its UK Extension. Transfers out of Türkiye are also made in line with Article 9 of the KVKK.

• Contact form submissions and correspondence: 2 years after your enquiry has been concluded.
• Technical logs: for as long as needed for security, at most 1 year.
• Akademi session cookie: 1 year; renewed each time you visit the Akademi.
• IP address for limiting Akademi login attempts: in memory only, at most 15 minutes.

When the period ends, the data is deleted, destroyed or anonymised.

The site does not use advertising or tracking cookies. Our only cookie is a strictly necessary one that is set only when you log in to Redesign Akademi with a code and that remembers your session (rd_akademi, 1 year). Cloudflare may use short-lived technical cookies where needed to protect the site from malicious traffic. Strictly necessary cookies do not require consent under the ePrivacy rules (Article 5(3) of the ePrivacy Directive and, in the UK, regulation 6 of the Privacy and Electronic Communications Regulations), so no cookie banner is shown.

Under Articles 15 to 22 of the GDPR and the UK GDPR, you have the right to:

• access the personal data we hold about you and receive a copy of it (Article 15);
• have inaccurate or incomplete data corrected (Article 16);
• have your data erased where the legal conditions are met (Article 17);
• have the processing of your data restricted (Article 18);
• have us inform recipients of any correction, erasure or restriction (Article 19);
• receive the data you provided to us in a structured, commonly used and machine-readable format, or have it transmitted to another controller, where the legal conditions are met (Article 20);
• object to processing based on our legitimate interests (Article 21, see below);
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you (Article 22).

Where we process your data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

You can send requests about your rights by email to [email protected] or in writing to the address above. We respond free of charge, without undue delay and at the latest within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EEA country where you live or work or where the alleged infringement took place. In the UK, this is the Information Commissioner’s Office (ICO). You can also contact the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

We update this notice when necessary; the current version is always available on this page.