Privacy Notice

Data Controller

Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by Hira Stone (“Hira Stone”) as data controller within the scope described below. Address: Donanmacı Mah. 1723 Sk. No:1 Kat:4 Karşıyaka/İzmir.

Which Personal Data Do We Process?

• Contact form: first name, last name, email address and message. This information is not sent to our servers; it is prepared as a WhatsApp message in your browser and reaches us, together with your phone number and WhatsApp profile details, when you send it in WhatsApp.
• Phone calls: your phone number and the information you share during the call.
• Website security: IP address, date and time, requested page and browser details recorded by our server and security infrastructure when you visit the website.
• Only if you consent: usage statistics collected through analytics cookies (Google Analytics 4, Yandex Metrica).

Purposes of Processing

• Responding to your requests and questions, and conducting quotation and project discussions,
• Ensuring the security of our website and preventing misuse,
• With your consent, measuring and improving the use of our website statistically.

Legal Grounds

Responding to your request is based on KVKK Art. 5/2-(c) (directly related to entering into a contract) and Art. 5/2-(f) (our legitimate interest); security logs on Art. 5/2-(ç) (legal obligation) and Art. 5/2-(f); analytics cookies and the transfer abroad via WhatsApp on your explicit consent under KVKK Art. 5/1 and Art. 9. You may withdraw your consent at any time.

Transfers

Transfers abroad are carried out in accordance with the procedures and safeguards set out in KVKK Art. 9.

• WhatsApp messaging service: Meta Platforms Ireland Ltd. (abroad).
• Hosting and security: our servers run on Google Cloud (Germany); content delivery and security are provided by Cloudflare Inc. (abroad).
• Only with your consent: Google (Analytics, Maps) and Yandex (Metrica).
• Competent public authorities where required by law.

Method of Collection

Your personal data is collected partly by automated means through electronic channels such as our website, WhatsApp and telephone.

Retention Periods

When the period expires, the data is deleted, destroyed or anonymised.

• WhatsApp and phone correspondence: up to 2 years after your request is concluded,
• Server and security logs: up to 6 months,
• Cookie consent record: 12 months,
• Analytics data: for the retention setting of the relevant service (up to 14 months).

Your Rights Under KVKK

Under KVKK Art. 11, by applying to the data controller you have the right to:

• Learn whether your personal data is processed and, if so, request information about it,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Turkey or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate, and deletion or destruction under KVKK Art. 7, and request that these be notified to third parties to whom it was transferred,
• Object to a result against you arising exclusively from automated analysis,
• Claim compensation for damages arising from unlawful processing.

How to Apply

You can send your requests in writing, together with information identifying you, to our address above or reach us via the channels on our contact page. Your application will be concluded free of charge within 30 days at the latest.