Privacy & KVKK

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by W3 Safiye Reklam Medya Danışmanlık Gıda Turizm ve Tic.Ltd. Şti., Istanbul ("W3"), acting as data controller, within the scope described below.

Contact: hi@w3.ist

This site has a contact form, a playbook mailing-list signup and consent-based Google Analytics 4. There is no account sign-up. Contact form: name, company (optional), email and the brief you write to us. Playbook subscription: your email address only. Email: if you write to us at hi@w3.ist, we process the contact data you send us — your name, your email address and the content of your message. Analytics: with your consent, Google Analytics 4 collects usage data (pages viewed, approximate location, device type) with IP anonymization. Without consent, no analytics run. Preferences: your consent decision is stored in your browser (localStorage), not on our servers. Your language is part of the address (/tr) and is not stored.

Under GDPR Art. 6(1) and Turkish KVKK Art. 5: contact form data is processed on the basis of pre-contractual steps taken at your request (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). Playbook emails and analytics are processed on the basis of your explicit consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), which you can withdraw at any time. Data you send by email is processed solely to respond to your request and to conduct quote and project discussions. Legal bases: KVKK art. 5/2-c (processing directly related to the conclusion or performance of a contract) and KVKK art. 5/2-f (the controller's legitimate interest, provided your fundamental rights and freedoms are not harmed).

Contact enquiries: retained up to 24 months after our last exchange, then deleted. Playbook subscription: until you unsubscribe. GA4 analytics data: 14 months, then automatically deleted. Email correspondence is kept for as long as the related request or business relationship continues and, after it ends, for the applicable statutory limitation periods; once those periods expire it is deleted or destroyed.

Google Ireland Ltd. — Google Analytics 4 (consent-based, IP-anonymized). Vercel Inc. — our hosting provider, serving this website and receiving form submissions. We do not sell data. We do not share data with advertisers or other third parties.

Your personal data is not transferred to third parties, whether in Türkiye or abroad. The site is hosted on Vercel Inc. infrastructure, which is a technical hosting necessity, not a transfer of data for marketing purposes.

This site sets no tracking cookies before you consent. The consent banner offers equal Accept and Decline choices; your decision is remembered and can be changed at any time via “Cookie preferences” in the footer. Only the functional records below are kept in your browser's local storage; none of them is shared with third parties.

Fonts are bundled with the site at build time and served from the site's own domain; no request is made to Google servers at runtime.

Under GDPR (Art. 15–21) and KVKK (Art. 11) you may request: access to your data, correction, deletion, restriction of processing, data portability, and objection to processing. You may also lodge a complaint with your supervisory authority (in Türkiye: KVKK Kurumu; in the EU: your national DPA).

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed,
• request information about the processing if it has taken place,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• know the third parties, in Türkiye or abroad, to whom the data has been transferred,
• request correction of incomplete or inaccurate data,
• request erasure or destruction of the data under the conditions of Article 7 of the KVKK,
• request that corrections, erasures and destructions be notified to third parties to whom the data has been transferred,
• object to a result arising against you from analysis performed exclusively by automated systems,
• claim compensation if you suffer damage due to unlawful processing.

You can submit requests concerning these rights to hi@w3.ist. Applications are resolved free of charge within thirty days at the latest, as required by Article 13 of the KVKK.

This notice was last updated on 17.07.2026. When it changes, the new version is published on this page.