Privacy Notice for Personal Data
Effective date: 25 August 2026
A privacy notice tells you who processes the personal data you submit, for which purpose, and on which legal ground. Piar Medya collects your full name, e-mail, phone number, company name, a free text description and an optional document through its quote, contact and career forms. The data controller is Piar Medya, the request channel is [email protected], and the statutory response deadline is 30 days.
Piar Medya operates from Türkiye and processes personal data under Law No. 6698 on the Protection of Personal Data (KVKK). Article 10 of that law requires every organisation collecting personal data to inform the individual at the moment of collection. The document below traces what happens to the information you submit through piarmedya.com. Cookies are covered separately in the Privacy and Cookie Policy.
1. Who Is the Data Controller?
Your personal data is processed by Piar Medya acting as data controller under KVKK.
| Legal entity | |
|---|---|
| Address | Eyup Sultan Caddesi, Forum Center Is Merkezi B Blok 1. Giris Kat:4 No:406, Selcuklu / Konya, Türkiye |
| [email protected] | |
| Registered electronic mail (KEP) | |
| MERSIS / tax number |
2. Which Personal Data Is Processed?
What gets processed depends on which form you fill in. No form on the site asks for a national ID number, a home address, or any bank or card details.
| Channel | Categories of data |
|---|---|
| Quote form | Full name, e-mail, phone, company name, current website address, selected service, project stage, budget range, start timeline, project description (free text), optional document (pdf, doc, docx) |
| Contact form | Full name, e-mail, phone, message subject, message body (free text), optional document |
| Career form | Full name, e-mail, phone, area of expertise, free text introduction, CV file |
| All forms (automatic) | IP address, the page the form was sent from, form source (page or popup), submission time |
| Cookies | Browser and usage data; detailed in the cookie policy |
Free text fields deserve care: the project description, the message box and the CV file are entirely under your control. Leave out special categories of personal data such as health information, religion, trade union membership or criminal records, and leave out details about third parties unrelated to your request. None of it is needed to evaluate what you are asking for.
3. For Which Purposes Is the Data Processed?
- Assessing your quote request, scoping and pricing the work, and returning an offer
- Routing a question, suggestion or complaint from the contact form to the right team and answering it
- Evaluating your job application and reaching you when a suitable role opens
- Running pre-contractual discussions and performing the service agreement once it is signed
- Protecting the form infrastructure against automated submissions and abuse
- Meeting retention, disclosure and reporting obligations imposed by law
Unless you submit a form, your name, e-mail and phone number are never processed. Nobody is added to a mailing list for commercial messages without a separate and explicit opt in.
4. What Is the Legal Ground?
Every processing activity rests on one of the conditions listed in Article 5 of KVKK.
| Processing activity | Legal ground (KVKK Art. 5) |
|---|---|
| Handling a quote or contact request | Art. 5/2-(c) Directly related to the conclusion or performance of a contract |
| Evaluating a job application | Art. 5/2-(c) Pre-contractual negotiations |
| Keeping an application on file for future roles | Art. 5/1 Explicit consent; without consent the application is destroyed once the assessment ends |
| Form security, abuse detection, IP logging | Art. 5/2-(f) Legitimate interest, provided your fundamental rights are not harmed |
| Statutory retention and responses to authorities | Art. 5/2-(c) Compliance with a legal obligation |
| Optional analytics and marketing cookies | Art. 5/1 Explicit consent given through the cookie banner |
5. How Is the Data Collected?
Collection happens electronically, through the forms on piarmedya.com, by automated and partly automated means. Nothing is collected on paper or by phone. If you start filling in a form and change your mind, none of what you typed is stored; a record is created only when you press the send button.
6. Who Receives the Data?
Form records are never sold and never handed to third parties for advertising. Data reaches only the infrastructure providers required to run the service, plus public authorities where the law compels disclosure.
| Recipient | Purpose of transfer | Location |
|---|---|---|
| Resend (e-mail delivery infrastructure) | Delivering the form content to [email protected] | Outside Türkiye |
| Cloudflare Turnstile | Bot and automated submission verification | Outside Türkiye |
| Google (Tag Manager, Analytics, Ads) | Visit statistics and ad measurement, only where cookie consent was given | Outside Türkiye |
| Hosting the website and keeping server logs | ||
| Authorised public bodies | Requests made under statutory powers | Türkiye |
7. Is Data Transferred Abroad?
Yes. E-mail delivery, bot verification and the optional measurement layer run on providers based outside Türkiye, so submitting a form routes your data through servers abroad. Such transfers are carried out within the conditions set out in Article 9 of KVKK.
The Google Analytics and Google Ads layer stays optional: decline statistics and marketing in the cookie banner and no transfer to Google takes place. E-mail delivery and bot verification, by contrast, are required for the quote, contact and career forms to work at all.
8. How Long Is the Data Kept?
Retention follows the purpose of collection and the minimum periods set by Turkish law. Once a period expires, records are deleted, destroyed or anonymised.
| Record type | Retention period |
|---|---|
| Quote and contact requests that go nowhere | 2 years from closure of the request |
| Requests that turn into a contract | 10 years from the end of the relationship (TCO Art. 146, TCC Art. 82) |
| Transactions producing an invoice or accounting entry | 5 years (Tax Procedure Law Art. 253) |
| Job applications and CVs | |
| Server and traffic logs, including IP | 1 year |
9. What Are Your Rights Under Article 11?
By applying to the data controller you may:
- Learn whether your personal data is being processed
- Request information about the processing if it has taken place
- Learn the purpose of processing and whether the data is used accordingly
- Know the third parties inside or outside Türkiye to whom the data has been transferred
- Ask for correction of incomplete or inaccurate data and for that correction to be notified to those third parties
- Ask for erasure or destruction under the conditions of Article 7 and for that action to be notified to those third parties
- Object to a result reached solely through automated analysis that works against you
- Claim compensation for damage caused by unlawful processing
10. How Do You Submit a Request?
Requests follow the Communiqué on the Procedures and Principles of Application to the Data Controller, through any of these channels:
- A signed written petition delivered to the address above in person or through a notary
- A message signed with a secure electronic signature or mobile signature, sent to the KEP address
- An e-mail to [email protected] from an address you previously registered with Piar Medya
Include your full name, signature, national ID or passport number, a service address, your e-mail and phone where available, and the subject of the request. Piar Medya answers within 30 days of receiving it, free of charge unless the response carries a separate cost. Under Article 7 of the Communiqué, a fee per page may apply beyond ten pages, or the cost of the recording medium if a copy is supplied.
If the request is refused, the answer is inadequate, or no answer arrives in time, you may complain to the Turkish Data Protection Authority (KVKK Kurulu) within 30 days of learning the response and in any case within 60 days of your application. Our contact page lists the same channels.
11. How Are Cookies Handled?
Strictly necessary cookies always run so the site works. Statistics and marketing cookies run only after you consent in the cookie banner, and you may change that decision at any moment. Cookie types, lifetimes and browser level removal steps live in the separate policy.
12. Can the Notice Change?
Updates follow changes in legislation, the addition of a new form, or a change of infrastructure provider. The current version always sits at this address, with the effective date shown at the top. Amendments take effect on the date they are published.
13. A Note for Visitors in the EEA and the UK
Piar Medya is established in Türkiye and processes personal data under KVKK, which is modelled on European data protection law and grants a comparable set of rights. Access, rectification, erasure, objection and complaint requests from visitors in the EEA or the United Kingdom reach the same channel: [email protected], answered within 30 days.
Whether the GDPR applies to Piar Medya under Article 3(2), and whether a representative under Article 27 is required, depends on the scope of our activity directed at the EEA and the United Kingdom. Requests are handled through the channel above regardless of which framework applies.