KVKK Information Notice

Data controller

For the personal data processing described in this notice, Logic Grid Studio acts as the data controller. This notice is intended to explain, in English, how we may process personal data when operating our website, responding to enquiries, evaluating project opportunities, and managing related business communications in a Turkey-aware compliance context.

This notice is not a substitute for a contract-specific or vendor-specific notice that may be provided during a project, procurement, recruitment, or other separate process. Where a more specific notice applies, it should be read together with this page.

Categories of personal data

Depending on the relationship and the interaction, the following categories of personal data may be processed:

• Identity data such as name, surname, and signature details where relevant.
• Contact data such as email address, phone number, company address, and communication details.
• Professional and relationship data such as title, department, company, service interests, and business relationship records.
• Request and transaction data such as enquiry content, proposal discussions, meeting notes, support correspondence, and project-related records.
• Digital trace and usage data such as IP address, browser data, log records, cookie-related identifiers, and site interaction data.
• Finance and compliance data where a business relationship requires invoicing, accounting, or formal record keeping.

Purposes of processing

We may process personal data to respond to requests, plan or assess service fit, manage meetings and correspondence, prepare proposals or contracts, carry out project delivery and billing when a business relationship exists, maintain website security and performance, improve content planning and operational workflows, comply with legal or regulatory duties, and establish, exercise, or protect legal rights.

Our approach is to keep processing tied to a real operational purpose and to avoid collecting or retaining more data than is reasonably necessary for that purpose.

Collection methods and legal reasons

Personal data may be collected directly from you through contact forms, email, calls, video meetings, subscription forms, contractual onboarding, or documents you share with us. It may also be collected automatically through normal website operation, server logs, cookies, and security tooling, or indirectly through public business sources and referrals where appropriate.

Depending on the context, processing may rely on explicit consent where required, necessity for the conclusion or performance of a contract , compliance with legal obligations , data made public by the data subject to the extent consistent with that disclosure, necessity for the establishment, exercise, or protection of a right , and legitimate interests provided that fundamental rights and freedoms are not harmed.

Transfers to third parties and abroad

Personal data may be shared, where relevant and limited to need, with hosting and infrastructure providers, communication or productivity tools, analytics or technical support vendors, professional advisors, payment or finance counterparties, business partners involved in a requested service flow, and competent public institutions or authorities where disclosure is required or legally justified.

If a transfer outside Turkey becomes necessary, we handle it according to the transfer rules applicable under KVKK at the relevant time. Where required, we use explicit consent or another valid transfer basis and apply reasonable contractual, technical, and organisational safeguards.

Storage, retention, and protection

We retain data for the period necessary for the processing purpose, for reasonable business continuity, and for mandatory retention or limitation periods under applicable law. When data is no longer needed, it is deleted, destroyed, or anonymised as appropriate to the context.

We apply access controls, role-based handling, secure storage and transmission practices, and vendor-management measures intended to protect personal data against unlawful processing, unauthorised access, and accidental loss. Absolute security cannot be guaranteed in any digital environment.

Rights under KVKK

Within the scope of the rights framework recognised under Turkish personal data protection rules, data subjects may request to:

• learn whether personal data is processed;
• request information if personal data has been processed;
• learn the purpose of processing and whether data is used in line with that purpose;
• know the third parties to whom personal data is transferred, in Turkey or abroad;
• request correction of incomplete or inaccurate personal data;
• request deletion or destruction where the relevant conditions are met;
• request that correction, deletion, or destruction be notified to relevant third parties where applicable;
• object to a result that is exclusively produced through automated systems and is to the person's detriment; and
• claim compensation if unlawful processing causes damage.

Application method

To submit a KVKK-related request, you can email [email protected] with the subject line "KVKK Request" or use our contact page . Your request should clearly identify you, explain your relationship to Logic Grid Studio, describe the request in sufficient detail, and include any information needed to verify identity and locate the relevant records.

We may request additional verification where necessary and respond within the legally applicable timeframe. If a specific submission form or additional verification channel becomes necessary, we may direct you to use it so the request can be handled securely.

Updates

We may update this notice when our processing activities, vendor stack, or legal obligations change. The current version will remain available on this route together with the last updated date shown above.