PDPL Disclosure Statement

Last updated: 22 July 2026 19:56

Website: idesa.com.tr

• 1. Identity and Contact Information of the Data Controller

  • 1.1. Responsible person: Idesa Creative Studio
  • 1.2. Contact address: Aşağı Öveçler Mah. Kabil Cd. 1325 Sk. No:8/2 Çankaya/Ankara, Turkey
  • 1.3. Email address: [email protected]

• 2. Purpose of Processing Personal Data

  • 2.1. This clarification text covers the personal data of relevant persons who visit idesa.com.tr and benefit from its services.
  • 2.2. Your personal data may be processed through idesa.com.tr for the following purposes:
    • 2.2.1. Communicating with members, providing information, and delivering services.
    • 2.2.2. Carrying out purchase and reservation transactions and tracking their details.
    • 2.2.3. Managing e-newsletter subscriptions and sharing current information.
    • 2.2.4. Receiving, processing, and resolving requests and complaints.
    • 2.2.5. Carrying out product promotion and sales activities.
    • 2.2.6. Collecting and analyzing user feedback.
    • 2.2.7. Conducting market research and surveys.
    • 2.2.8. Sending special offers and promotions.
    • 2.2.9. Conducting user satisfaction surveys to improve service quality.
    • 2.2.10. Compiling and analyzing statistics regarding website usage.
    • 2.2.11. Providing targeted advertisements and evaluating advertising efficiency.
    • 2.2.12. Promoting membership benefits and providing user-specific offers.
    • 2.2.13. Announcing and promoting new products and services.
    • 2.2.14. Organizing user events and campaigns.
    • 2.2.15. Personalizing website content to improve user experience.
    • 2.2.16. Managing customer satisfaction and loyalty programs.
    • 2.2.17. Carrying out user security and fraud prevention activities.
    • 2.2.18. Fulfilling legal requirements and legal obligations.
    • 2.2.19. Managing communication and business relations with business partners and collaborating third parties.
    • 2.2.20. Carrying out general service provision, transaction execution, and customer relationship management activities.

• 3. With Whom and For What Purposes Personal Data May Be Shared

  • 3.1. The privacy and security of personal data are our priority and are protected with great care. However, your personal data may need to be disclosed or shared in the following cases:
    • 3.1.1. Service Providers and Business Partners: Personal data may be shared with business partners or service providers for the purpose of providing services or carrying out transactions.
    • 3.1.2. Legal Requirements: Personal data may be shared with official authorities, such as judicial authorities or regulatory bodies, where required by a legal obligation or legal process.
    • 3.1.3. Transaction Security and Fraud Prevention: Personal data may be shared with authorized institutions or security service providers for security measures required for the safety of users and the platform, or for fraud detection and prevention purposes.
    • 3.1.4. Collaborating Third Parties: Personal data may be shared with third parties with whom cooperation is established for the execution of certain transactions or the provision of certain services, in line with users’ consent.
  • 3.2. The purpose of such sharing is to support various legal, commercial, and operational purposes, such as improving users’ experience on the platform, providing services, fulfilling legal requirements, and ensuring user security.

• 4. Personal Data Collection Method and Legal Grounds

  • 4.1. Your data may be collected, recorded, or processed using the methods specified below.
    • 4.1.1. Filling out web forms: Users share their personal data by filling out various forms available on websites. These forms are generally used for membership, communication, registration, or purchase transactions.
    • 4.1.2. Cookies: Websites collect information by placing cookies, which are small text files, in users’ browsers. These cookies are used to track and store data such as visited pages, preferences, and session information.
    • 4.1.3. Tracking tools: Website owners use various tracking tools to monitor and analyze visitor behavior. These tools collect data such as which pages visitors visit, how long they stay, and which links they click.
    • 4.1.4. Direct communication: Website owners may collect personal data by communicating directly with users. This method of communication may take place in different ways, such as phone calls, email messages, or live chat support services.

• 5. Legal Grounds for Processing Data

  • 5.1. Cases Expressly Provided for by Law: Personal data may be processed in cases expressly provided for by Turkish laws and subject to certain conditions. For example, matters such as public safety, public order, prevention or investigation of crime may be relevant.
  • 5.2. Contractual Relationship: Processing personal data may constitute a legal ground where it is directly related to the establishment or performance of a contract and where processing the personal data of the parties to the contract is necessary within this scope. For example, processing information required for the purchase and delivery of a product or service may be based on a contractual relationship.
  • 5.3. Fulfillment of Legal Obligations: Processing personal data may be mandatory for the data controller to fulfill legal obligations determined by Turkish laws or relevant regulatory authorities. In this context, legal requirements such as filing tax declarations or keeping accounting records in accordance with tax laws may be among the legal grounds.

• 6. Rights of the Personal Data Subject

  • 6.1. Personal data subjects have the right to learn the purpose of processing their personal data, the processing period, and for what purposes and on which legal grounds their data is processed.
  • 6.2. In addition, personal data subjects may request access to their personal data and have the right to learn whether such data has been processed, for what purposes it has been processed if processed, and whether it has been transferred to third parties.
  • 6.3. Data subjects may request correction if their personal data has been processed incompletely or inaccurately. In addition, personal data subjects may request the deletion or destruction of their personal data if the reasons requiring the processing of personal data cease to exist or if other conditions stipulated by law are met.
  • 6.4. Personal data subjects may request information regarding the processing of their personal data and learn for what purpose and on which legal grounds the processed data is processed, and to whom and for what purposes such data is transferred.
  • 6.5. Relevant persons may apply at any time to the contact email address stated above in accordance with the Turkish Personal Data Protection Law No. 6698 in order to exercise the rights specified above.
  • 6.6. Pursuant to paragraph 1 of Article 13 of the Turkish Personal Data Protection Law, as personal data subjects, you may submit your requests regarding your rights in writing or through other methods determined by the Personal Data Protection Board. You may obtain the application information text and application form explaining the channels and procedures through which you may submit your application from the site.
  • 6.7. If the personal data subject submits their request regarding their rights to us in accordance with the procedure, the relevant request shall be concluded free of charge as soon as possible and no later than 30 (thirty) days, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. In cases where the application is rejected, the response given is found insufficient, or no response is provided within the prescribed period, you may file a complaint with the Personal Data Protection Board within thirty days from the date you learn our response and, in any case, within sixty days from the date of application.

• 7. Effectiveness and Dispute Resolution

  • 7.1. Any amendment made to this agreement shall enter into force as soon as it is published on the site or on any publicly accessible platform.
  • 7.2. The laws of the Republic of Türkiye shall apply to the resolution of any dispute arising from the implementation or interpretation of this Agreement; the Courts and Enforcement Offices of Ankara Courthouse shall have jurisdiction.