Who we are and how to reach us
KuarkTek Digital ("KuarkTek", "we", "us") is a digital design studio based in Ankara, Türkiye. For the purposes of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR"), KuarkTek Digital is the data controller of the personal data described in this policy.
- Address: Filistin Cad. 17/3, 06700 Çankaya, Ankara, Türkiye
- Email: info@kuarktek.digital
- Phone: +90 850 308 88 20
Questions about this policy, requests about your data and complaints should be sent to the email address above with the subject line "Personal data". We reply to every request.
What this policy covers
This policy applies to the website at kuarktek.digital and its subpages, to the inquiry forms on the site, and to the personal data we handle when you email, call or meet us about a project. It does not cover the websites we link to, or the data our clients collect on the websites and applications we build for them. Those are governed by each owner's own privacy notice.
When we build or run a website, campaign or application for a client, we usually act as a data processor on the client's instructions. Our role in that setting, and the safeguards that apply, are described in our GDPR Policy.
The data we collect
We collect personal data in three ways: you give it to us, it is created automatically when you use the site, or it is shared with us during a project.
Data you give us
When you send the "Start a Project" form, the "Let's talk" form or an email, we receive what you type:
- your name and email address;
- your company name, if you provide it;
- the budget range you select, if you provide it;
- the description of your project or your message;
- a file you attach, if any (up to 5 MB);
- anything else you choose to tell us, including on the phone or in a meeting.
Both forms contain a hidden field that is invisible to people and exists only to catch automated spam. It is not used for anything else.
Data created when you use the site
Like every website, kuarktek.digital is served by a web server that records standard technical logs: your IP address, the pages requested, the date and time, the browser and device type, and the referring page. These logs are kept by our hosting provider for security and troubleshooting and are not combined with the contents of your inquiries.
When you submit a form, a hashed (one-way, unreadable) form of your IP address is held on the server for fifteen minutes so that the form cannot be flooded. The original address is not stored by the form.
The site stores four small technical values in your browser's session storage, kt-opened, kt-lite, kt-nogl and kt-talk: that the site's opening animation has already played, that your device asked for a lighter animation mode, that your graphics driver could not carry the site's 3D surfaces, and that you closed the floating contact card. They contain no personal data, are never sent to us, and are removed when you close the tab. Once you answer the cookie band, that answer is kept in local storage under kt-consent for six months, so the question is not repeated on every page. Beyond them, the site loads Google Analytics 4, through Google Tag Manager, only if you accept it in the cookie band, and that measurement is linked to Google Ads so we can advertise to past visitors. Nothing is requested from Google before you accept. Full detail is in our Cookie Policy.
Data shared during a project
If we work together, we will process the names, business contact details and roles of the people involved, the contents of the briefs, documents and assets you share, and the personal data contained in the materials we design, write or film for you (for example, team portraits or testimonials). Where that data belongs to your customers or users, we handle it under the written agreement between us.
Why we use your data and on what legal basis
| Purpose | Data used | Legal basis (KVKK / GDPR) |
|---|---|---|
| Answering your inquiry and assessing whether we can help | Form and email contents | Steps taken at your request before a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)) |
| Preparing proposals, delivering projects, invoicing | Contact details, project materials | Performance of a contract; legal obligations on invoicing and record-keeping (KVKK Art. 5(2)(a), (c), (ç); GDPR Art. 6(1)(b), (c)) |
| Keeping the site available and secure, preventing spam and abuse | Server logs, hashed IP, honeypot field | Our legitimate interest in running a safe service (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) |
| Staying in touch after a project about relevant work | Business contact details | Our legitimate interest in maintaining client relationships; you can object at any time (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)) |
| Measuring how the site is used, and showing our advertising to people who have visited it | Analytics identifiers, page-view data, the signal that your browser visited the site | Your consent, given in the cookie band and withdrawable at any time (KVKK Art. 5(1); GDPR Art. 6(1)(a)) |
| Publishing a case study or testimonial that names you | Name, role, company, likeness, quotes | Your explicit consent, which you can withdraw (KVKK Art. 5(1); GDPR Art. 6(1)(a)) |
| Meeting legal obligations or responding to lawful requests | As required | Legal obligation (KVKK Art. 5(2)(ç); GDPR Art. 6(1)(c)) |
We do not use your data for automated decision-making or profiling, and we never sell or rent personal data.
Who can see your data
Your data is seen only by the KuarkTek team members who need it for the purposes above, and by a small number of service providers who process it on our instructions:
- Hosting. kuarktek.digital is hosted by Hostinger International Ltd. Server logs and form submissions pass through its infrastructure. Hostinger operates data centers in several regions, including the European Union.
- Email. Form submissions are delivered to our mailbox at info@kuarktek.digital. Correspondence is stored by our email service provider.
- Project tools. During a project we may use file-sharing, design, project-management and video-conferencing tools to collaborate with you. Each provider is bound by its own data-processing terms.
- Analytics and advertising. If you accept, Google Ireland Ltd. processes page-view data on our behalf through Google Analytics 4 and Google Tag Manager, and the linked Google Ads account uses the visit signal to show our advertising to past visitors. Decline, and no data reaches Google.
- Professional advisers. Accountants, lawyers and insurers, where necessary and under confidentiality.
- Authorities. Courts, regulators or law-enforcement bodies when the law requires it.
We share nothing with data brokers, and we never sell personal data. The one advertising network involved is Google, in the limited way described above: if you accept the cookie band, Google receives the signal that your browser visited the site so we can advertise to past visitors. Your contact details, the contents of your inquiry and your project materials are never part of that, and go to no advertising network at all.
International transfers
KuarkTek is based in Türkiye. If you contact us from the European Economic Area, the United Kingdom or Switzerland, your data will be transferred to Türkiye, which has not received an adequacy decision from the European Commission. We rely on the transfer being necessary to respond to your request and to perform a contract with you (GDPR Art. 49(1)(b)) and, where we sign a data-processing agreement with a client, on the European Commission's Standard Contractual Clauses.
Where our service providers store data outside Türkiye, we transfer it in line with the safeguards required by KVKK Art. 9 and the decisions of the Personal Data Protection Board.
How long we keep your data
- Inquiries that do not become projects: up to 3 years after our last exchange, so we can pick up the conversation if you return. Earlier on request.
- Client projects: for the life of the relationship and then for 10 years after the last invoice, as required by the Turkish Commercial Code and the Tax Procedure Law for commercial records.
- Server logs: kept by our hosting provider for a limited period, typically no more than a few months, unless needed to investigate a security incident.
- Anti-spam IP hash: 15 minutes.
- Published case studies and testimonials: until you withdraw consent or ask us to remove them.
When the retention period ends, data is deleted or anonymized.
How we protect your data
The site is served over HTTPS only. Form submissions are size-limited, validated, rate-limited and accepted only from our own domain. Access to our mailbox, project tools and files is restricted to the team members who need it and protected by strong authentication. Source files, drafts and internal documents are never published to the web server. We review these measures as the site and our tools change.
No method of transmission or storage is completely secure. If we become aware of a breach that puts your rights at risk, we will notify you and the competent authority as the law requires.
Your rights
Under KVKK Art. 11 and GDPR Arts. 15–22, you have the right to:
- learn whether we process your personal data and, if so, request information about it;
- learn the purpose of processing and whether the data is used for that purpose;
- know the third parties in Türkiye or abroad to whom the data has been transferred;
- request correction of incomplete or inaccurate data;
- request deletion or destruction of the data where the conditions in the law are met;
- request that corrections and deletions be communicated to the third parties who received the data;
- object to a result that was produced against you by the exclusive analysis of the data through automated systems;
- claim compensation for damage caused by unlawful processing;
- under the GDPR, additionally request restriction of processing, receive your data in a portable format, object to processing based on legitimate interests, and withdraw consent at any time without affecting earlier processing.
To exercise any of these rights, email info@kuarktek.digital or write to our postal address. We may ask you to confirm your identity before acting on a request. We answer within 30 days (KVKK) or one month (GDPR), free of charge unless a request is manifestly unfounded or excessive.
If you are not satisfied with our response, you can lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, kvkk.gov.tr) or, if you are in the EEA, with the supervisory authority of your country of residence.
Children
kuarktek.digital is a business-to-business website and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Links to other websites
The site links to client websites, award platforms and social networks. We do not control those sites and are not responsible for their privacy practices. Read their notices before sharing data with them.
Changes to this policy
We will update this policy when our practices, our tools or the law change. The date at the top of the page shows the latest version. Significant changes will be announced on this page; continued use of the site after a change means the updated policy applies.