Privacy Policy

1) Data Controller

Responsible for processing personal data on this website:

Kayalar Studio
Email: kayalarstudio@gmail.com

2) What data we process and for what purpose

When using this site, the following data may be processed:

a) Server and access logs

Processed data: IP address, date-time, requested page, device and browser information, referer URL (if any)

Purpose: To operate the site securely and stably, detect attacks and errors

Legal basis: Legitimate interest (GDPR Article 6/1-f)

b) Contact form or email communication

Processed data: Name, email, message content (whatever you send)

Purpose: To respond to your request, conduct communication

Legal basis: Pre-contractual steps / request management (GDPR Article 6/1-b) and, depending on the situation, legitimate interest (Article 6/1-f)

c) Project/press kit downloads (if any)

Processed data: Technical access records (logs)

Purpose: Service provision and security

Legal basis: Legitimate interest (GDPR Article 6/1-f)

This information, in accordance with GDPR transparency obligations, includes the necessary headings.

3) Cookies and similar technologies

Cookie usage and preference management are explained on the "Cookie Policy" page. In Germany, explicit consent is required for non-essential cookies.

4) Data processors and recipients

Third parties such as site hosting and infrastructure service providers may process your data on our behalf (data processor). Example: Vercel (hosting). Vercel's data processing agreement and privacy texts are available.

5) International data transfer

Due to hosting/infrastructure providers, your data may be processed outside the EU/EEA. In such cases, appropriate safeguards (e.g., Standard Contractual Clauses) may be used.

6) Retention periods

Log records: 7–30 days

Contact messages: 6–12 months after the request is resolved or the legal obligation period

Exact periods are determined according to the processing purpose and legal obligations.

7) Your rights

Under GDPR, you may request: access, rectification, erasure, restriction of processing, portability, objection, (if applicable) withdrawal of consent. You also have the right to complain to the competent supervisory authority.

8) Security

We implement technical and administrative security measures to protect data (such as access control, minimum privileges, secure communication).

9) Contact

For privacy-related requests: kayalarstudio@gmail.com