Skip to content

PRIVACY NOTICE

Your personal data

This notice explains which data is processed when you deal with Studio Humay, for what purpose, and on what legal basis. It is written to meet the information duty under the Turkish Personal Data Protection Law (KVKK, no. 6698) and the information requirements of the EU General Data Protection Regulation.

Data controller

Studio Humay, Istanbul, acting as data controller for the processing described here. For anything in this notice, write to merhaba@studiohumay.com

What the site processes

This site sets no cookies. There is no account, no form and no checkout. When you open a page, your browser sends no request to any host but ours: fonts are served from our own domain, and there are no maps, embedded video, chat widgets or advertising pixels.

No visitor measurement tool runs on this site. There is no page view counter, no heatmap and no session recording. If a measurement tool is ever added, this section is updated first and the tool is switched on second.

Hosting runs on Vercel infrastructure. Vercel keeps server logs to operate and secure the service. Those logs can contain an IP address, are kept briefly, and are not used by us for marketing. That is the only visit data that reaches us.

What we process when you get in touch

When you write by email or WhatsApp, we process your name, your contact details, the organisation you represent and the content of the correspondence. You provide this yourself; we do not compile it from other sources.

Purposes: assessing your enquiry, preparing a proposal, forming and performing a contract if we start working together, and telling you about relevant services afterwards.

Legal bases: for proposal and contract work, KVKK article 5/2-c and GDPR article 6(1)(b). For the later follow up, KVKK article 5/2-f and GDPR article 6(1)(f). The legitimate interest assessment is documented: the interest is maintaining a business relationship and describing a relevant service, the processing is necessary for that, and the targeting stays within the subject you approached us about.

Commercial messages and opting out

If you have been in touch with us, we may write to you about our services. Those messages stay within the subject you raised. They are never based on purchased lists or data compiled from third parties.

Every message carries a one step way to opt out. You can also opt out at any time by writing to merhaba@studiohumay.com. When a request arrives, your record leaves the active list and enters a suppression list, so you are not contacted again through another channel.

Transfers

Your personal data is not sold, rented, or handed to third parties for marketing.

The infrastructure providers we rely on can access data technically: Vercel for hosting, our email provider for mail, WhatsApp for messaging. Their servers can sit outside Turkiye, so data can be transferred abroad. Any transfer happens only to the extent the service requires.

Retention

Correspondence that stays at the proposal stage is kept for three years from the last contact, then deleted or anonymised.

If we start working together, the contract and related records are kept for the limitation and retention periods that the applicable law requires.

Server logs are kept for the provider's own period, which is short.

Your rights

Under KVKK article 11 and under the GDPR you have the right to: learn whether your data is processed, request information if it is, learn the purpose and whether it is used accordingly, know the third parties it is transferred to at home or abroad, have incomplete or incorrect data corrected, have data erased or destroyed, have any correction or erasure notified to those third parties, object to the processing, and claim compensation if unlawful processing has caused you damage.

Under the Turkish Communique on Application Procedures you can send your request in any of these ways: by email to merhaba@studiohumay.com, by a message signed with a secure electronic signature or a mobile signature, from an email address already registered in our records, or as a signed letter delivered in writing. State your name, your contact details and the subject of your request.

Your request is concluded within thirty days at the latest. No fee is charged unless the response itself involves a cost. If you are not satisfied with the outcome, or no answer arrives in time, you can complain to the Turkish Personal Data Protection Board.

Changes

Effective date: 28 July 2026. This is the date on which the present version of the notice took effect.

If this notice changes, the effective date changes with it. For the notice to change, the behaviour of the site has to change first, not the other way round.

Back to the home page