Personal Data Notice (KVKK)
KVKK is Turkey's Law No. 6698 on the Protection of Personal Data. This notice is prepared under Article 10 of KVKK to inform people who visit the Prestige Agency website and contact us by email or social media messaging. This page is an English translation of our Turkish-language notice, provided for information only; the Turkish original governs in case of any discrepancy. This notice is for information only; it does not request your consent.
1. Data controller
- Data controller: Yılmaz Onur Sakarya (a natural person operating under the Prestige Agency brand)
- Country: Turkey (requests are accepted by email only)
- Email: yilmazsakarya@agencyprestige.net
2. What personal data do we collect, and how?
| Situation | Data | Collection method |
|---|---|---|
| When you email us | Full name, email address, the content of your message and any business information you share | Electronically, through the email you send |
| When you message us on social media | Name / username, message content, any business information you share | Electronically, through Instagram, Facebook or LinkedIn messaging |
| When you visit our website | IP address, browser and device information, visit time, pages viewed (server logs) | Automatically, on the hosting provider's servers |
Our website does not include a contact form, membership system, or an analytics or advertising tracking tool. For information about cookies, see our Privacy & Cookie Policy.
3. For what purposes do we process personal data?
- Responding to your requests and questions
- Holding discussions about our services and preparing proposals
- Keeping the website secure and running smoothly
- Fulfilling our legal obligations
4. Legal grounds
Your personal data is processed based on the following legal grounds listed in Article 5(2) of KVKK:
- Directly related to the establishment or performance of a contract (subparagraph c): proposal and service discussions
- Compliance with the data controller's legal obligation (subparagraph ç)
- Establishment, exercise or protection of a right (subparagraph e)
- Our legitimate interest, provided it does not harm your fundamental rights and freedoms (subparagraph f): conducting correspondence and website security
5. Who can personal data be transferred to, and for what purpose?
- Service providers we work with: Google (Gmail) for email, Cloudflare for website hosting; and, for correspondence on social media, Meta Platforms (Instagram, Facebook) and LinkedIn. Solely for the purpose of delivering the service.
- Authorized public institutions and organizations: only within the scope of a legal obligation and if requested.
These providers' servers may be located abroad (mainly in the United States). As a result, your email correspondence and site logs may be transferred abroad; such transfer is being assessed under Article 9 of KVKK.
6. Retention period
Your personal data is retained for the period required by the purpose of processing and the periods set out in applicable legislation; once that period ends, it is deleted, destroyed or anonymized.
Correspondence that does not lead to a proposal or contract is kept for 1 year from the date of the last message; correspondence and documents that lead to a contract are kept for the periods set out in the applicable tax and commercial legislation. Server logs are kept for the period set by the hosting provider's own policy.
7. Your rights
Under Article 11 of KVKK, by applying to the data controller you have the right to:
- Learn whether your personal data is being processed,
- Request information about it if it has been processed,
- Learn the purpose of processing and whether it is used in line with that purpose,
- Know the third parties to whom it is transferred, domestically or abroad,
- Request correction if it has been processed incompletely or incorrectly,
- Request its deletion or destruction within the conditions set out in Article 7 of KVKK,
- Request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
- Object to a result against you that arises solely from automated analysis of the processed data,
- Request compensation for damages arising from unlawful processing.
8. How to apply
You can submit your request by email to yilmazsakarya@agencyprestige.net. We may ask you for additional information to verify your identity. Your request will be concluded as soon as possible depending on its nature, and within thirty days at the latest (KVKK Art. 13).
Last updated: 26 September 2026