1. Data controller
For personal data processed through this website, the data controller is artist Ümmühan Tunçtürk (use the site contact details or contact form).
2. What data is processed?
- Contact form: name, email, message text, and optional subject.
- Membership: email, username, display name, password hash (plain passwords are not stored).
- Order / request: name, email, phone, address fields, notes, and cart contents.
- Technical logs: IP address, browser type, date/time (for server security and legal obligations, kept for a limited period).
3. Purposes of processing
- Providing the gallery service and running order and payment processes.
- Creating membership accounts and enabling interactions such as comments.
- Responding to contact requests.
- Website security, fraud prevention, and fulfilling legal obligations.
4. Legal bases
Your data may be processed based on contract formation or performance, the controller’s legitimate interests, explicit consent (e.g. if separately requested for marketing), or other legal bases provided by law.
5. Transfers
Transfers may be made to a payment service provider for payments; to hosting / SMTP providers for email; and to Google or Facebook if you choose OAuth sign-in. Transfers occur to the extent required by the service and under applicable agreements.
6. Retention
Data is kept for as long as required by the processing purpose and statutory limitation periods. Legal retention periods for orders and accounting records are reserved.
7. Your rights under KVKK
Under Article 11 of the KVKK;
- learn whether your personal data is processed,
- if processed, request information about it,
- learn the purpose of processing and whether use is consistent with it,
- know third parties to whom data is transferred domestically or abroad,
- request rectification if incomplete or inaccurate,
- request erasure or destruction under the conditions set out in the KVKK,
- request notification of the above to third parties to whom data was transferred,
- object to a result against you arising solely from automated processing,
- request compensation if you suffer damage due to unlawful processing
You may submit requests via the contact form or in writing. We respond within a reasonable time.
8. Policy changes
This text may be updated. Material changes may be announced on the site; we recommend reviewing this page periodically.