Privacy Policy

1. Data Controller

Bastas Design
Founded by Gizem Bastas
Email: info@bastasdesign.com
Website: www.bastasdesign.com

Bastas Design is the data controller responsible for your personal data as described in this policy.

2. What Data We Collect

We collect the following categories of personal data:

• Contact Form Data: Name, email address, subject, and message content — collected when you submit the contact form.
• Technical Data: IP address, browser type and version, operating system, referring URL, pages visited, and access timestamps — collected automatically via server logs.
• Cookie Data: Functional cookies for site operation. See Section 7 (Cookies) for details.

3. Why We Collect It (Legal Basis)

• Contact form data: Processed based on your consent (GDPR Art. 6(1)(a)) — you voluntarily submit the form to contact us.
• Technical/server log data: Processed based on our legitimate interest (GDPR Art. 6(1)(f)) in maintaining site security and performance.
• Cookie data: Essential cookies are processed based on legitimate interest. Non-essential cookies (if any) require your consent.

4. How We Use Your Data

• To respond to your inquiries via the contact form
• To maintain and improve our website
• To ensure site security and prevent abuse
• To comply with legal obligations

We do NOT use your data for automated decision-making or profiling.

5. Data Retention

• Contact form submissions: Retained for 12 months, then deleted.
• Server logs: Retained for 90 days, then deleted.
• Cookie data: See Section 7 for cookie-specific expiry.

6. Who We Share Data With

Your data may be processed by the following third parties:

• Hosting Provider: Hostinger International Ltd. — servers located in Germany (Frankfurt).
• Google Fonts: Font files are loaded from Google servers. Google may collect your IP address. See Google's Privacy Policy.
• Google AdSense: We may serve ads through Google AdSense on certain pages. AdSense uses cookies and device identifiers to deliver and measure ads. See How Google uses information from sites that use our services.

We do not sell, rent, or trade your personal data to any third party.

7. Cookies

This website uses the following cookies:

• Essential cookies: Required for basic site functionality. No consent required.
• Advertising cookies: Where Google AdSense is active on a page, Google and its partners may set cookies to personalize and measure ads. You can control these at Google Ads Settings or opt out of personalized advertising via youradchoices.com.

We do not currently use first-party analytics or tracking cookies beyond those described above. If this changes, we will implement a cookie consent mechanism before activating them.

8. Cross-Border Data Transfers

Some of our service providers process data outside of Turkey and the EU/EEA:

• Google Fonts (USA): Font delivery. Transfer basis: Google's Standard Contractual Clauses (SCCs).
• Google AdSense (USA): Ad serving and measurement. Transfer basis: Google's Standard Contractual Clauses (SCCs).

9. Your Rights

Under GDPR and KVKK, you have the right to:

• Access — Request a copy of all personal data we hold about you (GDPR Art. 15 / KVKK Art. 11-b)
• Rectification — Request correction of inaccurate data (GDPR Art. 16 / KVKK Art. 11-c)
• Erasure — Request deletion of your data (GDPR Art. 17 / KVKK Art. 7)
• Restriction — Request that we stop processing your data (GDPR Art. 18)
• Portability — Request your data in a machine-readable format (GDPR Art. 20 / KVKK Art. 11-e)
• Objection — Object to processing based on legitimate interest (GDPR Art. 21 / KVKK Art. 11-d)
• Withdraw consent — Withdraw consent at any time without affecting prior processing (GDPR Art. 7(3))

To exercise any of these rights, contact us at info@bastasdesign.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority: Kişisel Verileri Koruma Kurumu (KVKK Board) — https://www.kvkk.gov.tr. EU residents may contact their local Data Protection Authority.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

Bastas Design
Email: info@bastasdesign.com