Legal

Data Protection Notice

1. Data controller

The data controller is Adem Yaşar, trading as MOSTAR Construction and Renovation. The registered address is Sekiz Eylul, 93/1 Sokak No:12/A Giris Kat, 35730 Kemalpasa / Izmir. Our phone number is +90 552 226 64 94. This notice was prepared under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (“KVKK”).

This notice covers mostarinsaattadilat.com only. It does not cover the other sites you reach from here, or the processing carried out on our building sites. Those are separate activities and people are informed about them separately, in the place where they happen.

2. Personal data we process

This site has no form, no analytics tool, no cookie that tracks you and no third-party embed. Even so, we do not claim that no data is processed at all, because every website leaves access records on its server. Below we list what actually happens.

  • Access records. The server hosting this site automatically records the IP address, the date and time, and the browser and operating system for every visit. We do not create these records. The hosting infrastructure keeps them for security purposes.
  • Contact details. However you reach us, we reply. We use the name, phone number and message content you share only to conclude the matter at hand. There is no form on the site that collects this information, and we keep no marketing database.
  • One preference stored on your device. Whether the opening animation has already played in this session is kept in your own browser storage. This record never leaves your device and never reaches us.

Please do not share special categories of personal data with us, such as health information or biometric data. We do not need it and we do not ask for it.

3. Purpose, method and legal basis

Access records are created on the hosting infrastructure so that the site runs securely and faults can be detected. We do not create these records ourselves, but we are the ones who chose the infrastructure. They are collected by automated means, and the legal basis is the legitimate interest of the data controller under Article 5/2(f) of the Law.

If you contact us, we use what you share to answer your question, arrange a site visit, prepare a quote and, where relevant, to carry out the pre-contractual steps. On a phone call this is collected by non-automated means, and in written channels by automated means. The legal basis is Article 5/2(c) where a contract is involved and Article 5/2(f) otherwise.

We do not ask for your explicit consent, because the Law already provides a basis for each of the purposes above. Asking for consent where a legal ground exists would be misleading.

4. Transfers and processors

We do not sell or rent your personal data, and we do not share it for advertising. The following parties are involved for the service to work technically.

  • The hosting provider acts as a data processor on our behalf. Access records are created on its infrastructure.
  • Messaging apps are not processors acting on our behalf. They are independent data controllers subject to their own terms. If you write to us through one of them, the conversation runs on that platform’s infrastructure and it is one you started by your own choice.

The hosting servers may be located abroad. In that case the regime in Article 9 of the Law, as amended on 1 June 2024, applies. It works in order, starting with an adequacy decision, then appropriate safeguards, then one of the incidental cases. We are telling you this plainly rather than claiming a compliance status we have not established. If you prefer to avoid infrastructure abroad, you can reach us by phone only.

5. Retention

Access records are kept for the short period the hosting infrastructure applies for security purposes and are then deleted automatically. Correspondence is kept as long as the matter it concerns remains open.

If the contact leads to a contract, the periods in the Turkish Commercial Code and the Tax Procedure Law apply to the records tied to that relationship. When the purpose disappears and no legal period requires them, we delete or anonymise the data.

6. Your rights and how to use them

Under Article 11 of the Law you have the following rights.

  1. To learn whether your personal data is processed
  2. To request information if it has been processed
  3. To learn the purpose of processing and whether the data is used accordingly
  4. To know the third parties to whom the data is transferred, at home or abroad
  5. To request correction if the data is incomplete or inaccurate
  6. To request erasure or destruction under Article 7 of the Law
  7. To request that correction, erasure and destruction be notified to third parties the data was transferred to
  8. To object to a result against you arising solely from automated analysis
  9. To claim compensation for damage arising from unlawful processing

You can submit your request to the address above in writing with a wet signature, by delivering it in person or sending it through a notary or registered mail. Written requests sent through a messaging app are also assessed, provided your identity can be verified. A request made verbally by telephone is not a valid application channel under the Communique. The phone line is there for questions.

Your application must contain your name and surname, your signature if it is written, your Turkish ID number (for foreign nationals, nationality and passport or identity number), your address for notification, and the subject of your request.

We answer within thirty days at the latest, and free of charge as a rule. The cost exceptions set out in the Communique are reserved. If your application is rejected or you are not satisfied with the answer, you may complain to the Personal Data Protection Board within thirty days of the answer and in any case within sixty days of your application. A complaint cannot be made before applying to us.

7. Cookies and device storage

This site sets no cookies, so no cookie consent banner is shown. We keep a single item in browser storage, and it is strictly necessary for the interface you asked for.

  • The opening animation flag stays for the browsing session, so the intro plays once instead of on every page.

This record never leaves your device and does not identify you. Because it is strictly necessary, it does not require consent. It is deleted automatically when you close the tab. If we ever add an analytics or marketing cookie, we will set up consent management first and update this text.

8. Security

The site is served over an encrypted connection. It is a static site, which means there is no database holding visitor records and no login area. This removes a large part of the usual attack surface.

9. Effective date and updates

This notice was last updated on 25 August 2026. If the way we process data changes, we update this page and change the date above. It is also reviewed in line with legislative changes and changes in how the site operates. The current version is always published on this page. Where the Turkish and English texts differ, the Turkish text prevails.