KVKK (Turkish Personal Data Protection Law No. 6698) information notice and
privacy policy.

1. Identity of the data controller

Brandworks Kurumsal İletişim ve PR Ajansı, acting as data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), processes your personal data within the scope described below.

• Address: Evliya Çelebi Mah. Meşrutiyet Cad. No:100/1, 34430 Beyoğlu / Istanbul
• Phone: +90 212 243 08 07
• Email: info@brandworks.com.tr
• Website: brandworks.com.tr

2. Personal data processed

The following categories of data may be processed in connection with your contact with us through our website:

• Identity data: First and last name.
• Contact data: Email address, phone number, name of the organization you work for.
• Request/complaint data: The content of messages you send via the contact form, proposal form or email, and the service area you are interested in.
• Transaction security data: IP address, browser and device information, on-site navigation records, cookie records.
• Marketing data: Your newsletter subscription preferences (only if you have given explicit consent).

Selections you make in interactive tools on our website, such as the Crisis Readiness Test, Quick Brief and Brand PR Analysis, are processed only in your browser and are not sent to our servers unless you submit your request through a form.

3. Purposes of processing personal data

• Receiving, evaluating and responding to your contact and proposal requests,
• Providing information about our services and arranging introductory meetings,
• Conducting pre-contract negotiations and establishing and maintaining business relationships,
• Evaluating job applications,
• Ensuring website security, detecting errors and improving performance,
• Sending newsletters, event announcements and content, provided that you have given explicit consent,
• Fulfilling obligations arising from applicable legislation.

4. Legal basis for processing

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c),
• Processing is necessary for the data controller to fulfill its legal obligations (Art. 5/2-ç),
• Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f),
• Your explicit consent, in cases such as newsletters and marketing communications (Art. 5/1).

5. Transfer of personal data

Your personal data may be transferred, strictly limited to the purposes stated above, to our hosting and email infrastructure providers, our security and content delivery service providers, measurement and analytics service providers (where used), and, where required by a legal obligation, to authorized public institutions and organizations.

Where service providers located abroad are used, transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.

6. Retention period

Your personal data is retained for as long as necessary for the purpose for which it is processed and, in any case, for the statutory limitation periods set out in applicable legislation. Once the purpose no longer exists, or upon your request, the data is erased, destroyed or anonymized.

• Contact/proposal form records: up to 2 years from the conclusion of the request,
• Job applications: up to 1 year from the application date,
• Website security logs: up to 1 year,
• Newsletter subscription: until your subscription ends.

7. Your rights as a data subject

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• Learn whether your personal data is being processed,
• Request information about the processing if it has been processed,
• Learn the purpose of processing and whether the data is used in line with that purpose,
• Know the third parties in Turkey or abroad to whom your data has been transferred,
• Request rectification if the data is incomplete or inaccurate,
• Request erasure or destruction under the conditions set out in Article 7 of the KVKK,
• Request that third parties to whom the data has been transferred be notified of rectification, erasure or destruction,
• Object to any outcome to your detriment resulting from analysis exclusively by automated systems,
• Claim compensation for damages if you suffer loss due to unlawful processing.

8. Cookie policy

Our website may use cookies and similar technologies to improve your experience and ensure the site functions properly. Types of cookies used:

• Strictly necessary cookies: Required for session management and form security (CSRF); they cannot be disabled.
• Preference cookies: Remember settings such as your chosen light/dark theme. This information is stored in your browser’s local storage and is not sent to the server.
• Analytics cookies: Generate aggregated, anonymous statistics to help us understand how the site is used.

You can manage, delete or block cookies through your browser settings. If strictly necessary cookies are blocked, some parts of the site may not function properly.

9. Data security

We take administrative and technical measures to ensure an appropriate level of security in order to prevent the unlawful processing of and access to your personal data and to safeguard it. These include restricting access permissions, using secure transfer protocols (HTTPS), security verification on form submissions, and regular updates and audits.

10. How to submit a request

You may submit requests regarding your rights through the channels below, together with information and documents verifying your identity. Depending on its nature, your request will be concluded free of charge within 30 days at the latest; if the process entails an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

• In writing: Evliya Çelebi Mah. Meşrutiyet Cad. No:100/1, 34430 Beyoğlu / Istanbul
• By email: info@brandworks.com.tr

11. Changes

This notice may be revised in line with legislative changes and updates to our business processes. The current version is always published on this page.