Privacy notice on the protection and processing of personal data

1. Data Controller

At Mareo Collective, we care about the privacy and security of your personal data.

This Privacy Notice has been prepared under Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform people who visit our website or contact us about how their personal data is processed.

Data Controller

Başar Tunçel (sole proprietorship)

Brand Name

Mareo Collective

Address

Altıntepe Mahallesi, Köknarlı Sokak, No: 2/6, Maltepe, Istanbul

Phone

+90 533 500 00 77

Email

[email protected]

Website

mareo.com.tr

2. Personal Data Processed

When you contact us through our website or other communication channels, the following personal data may be processed:

• Identity data: First and last name.
• Contact data: Email address and phone number.
• Request and communication data: Information you share in contact forms, emails or messages, your requests and the content of correspondence.
• Transaction security data: IP address, date, time and technical connection records created when you access the website or submit a form.
• Usage data: If you give consent, site usage information collected through cookies (pages visited, device and browser information, approximate location).

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Receiving and responding to your contact requests.
• Providing information about the services you request.
• Assessing project, consulting and partnership requests.
• Preparing and sharing proposals in line with your request.
• Managing potential business relationships.
• If you give consent, analyzing and improving the use of the website.
• If you subscribe to the blog newsletter, informing you about new articles.
• Ensuring website security and resolving technical issues.
• Fulfilling obligations arising from applicable legislation.
• Protecting rights in potential legal disputes.

Your personal data is not used outside these purposes or without meeting the conditions set out in applicable legislation.

4. Legal Grounds for Processing

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Direct relevance to the establishment or performance of a contract (Article 5/2-c): Assessing your service requests, preparing proposals and conducting pre-contract discussions.
• Fulfillment of the data controller's legal obligation (Article 5/2-ç): Creating and keeping records required by legislation.
• Processing being necessary to establish, exercise or protect a right (Article 5/2-e): Managing legal disputes and protecting rights.
• Legitimate interests of the data controller (Article 5/2-f): Managing communication processes and ensuring website security, provided that this does not harm your fundamental rights and freedoms.
• Explicit consent (Article 5/1): Measuring site usage through analytics cookies. For details, see the Cookie Policy.
• Explicit consent (Article 5/1): The email address you share for the blog newsletter is processed solely to inform you about new articles and on the basis of your consent. You can end your subscription at any time by writing to [email protected] .

5. Methods of Collecting Personal Data

Your personal data is obtained electronically, by automated or partly automated means, through:

• Contact and blog newsletter forms on our website,
• Email correspondence,
• Phone calls,
• Communication via WhatsApp,
• Cookies, if you give consent,
• Website server and security logs.

Non-automated operations, such as recording information shared during phone calls, may also fall under the KVKK if they form part of a data filing system.

6. Transfer of Personal Data

Limited to the purposes of processing and subject to the conditions required by applicable legislation, your personal data may be transferred to:

• Website hosting and technical infrastructure providers,
• Corporate email and communication infrastructure providers,
• Authorized technical service providers where necessary to deliver the relevant services,
• Google (Google Analytics), for site usage analysis, if you give consent,
• Competent public institutions and organizations, to fulfill legal obligations.

Your personal data is not shared with independent third parties for their own marketing activities.

If the technical services used result in data being transferred abroad, we act in accordance with the conditions set out in Article 9 of the KVKK. Transfers abroad under Google Analytics are based on your explicit consent.

7. Retention and Deletion of Personal Data

Your personal data is kept for as long as the purposes of processing require and in line with the retention periods set out in applicable legislation.

When the reasons requiring processing no longer exist and no other legal reason requires retention, your personal data is deleted, destroyed or anonymized in accordance with applicable legislation.

8. Your Rights as a Data Subject

Under Article 11 of the KVKK, you have the right to:

1. Learn whether your personal data is being processed.
2. Request information if your personal data has been processed.
3. Learn the purpose of processing and whether your data is used in line with that purpose.
4. Know the third parties to whom your personal data is transferred, in Turkey or abroad.
5. Request correction if your personal data is incomplete or inaccurate.
6. Request deletion or destruction of your personal data under the conditions set out in the KVKK.
7. Request that correction, deletion or destruction be notified to third parties to whom your personal data was transferred.
8. Object to a result that is to your detriment arising from the analysis of your data exclusively by automated systems.
9. Claim compensation for damages if you suffer loss because your personal data was processed unlawfully.

9. Applications and Contact

You can submit requests about your personal data under Articles 11 and 13 of the KVKK through the channels below.

Postal Address

Mareo Collective
Altıntepe Mahallesi, Köknarlı Sokak, No: 2/6
Maltepe, Istanbul

Email

[email protected]

Provided your identity is verified and the application procedures set out in the legislation are met, your application will be assessed and concluded as soon as possible depending on the nature of the request, and within 30 days at the latest.

10. Updates to This Privacy Notice

Mareo Collective may update this Privacy Notice in line with changes to its personal data processing activities or to applicable legislation.

The current version is available on our website.