This notice explains how ‹legal entity name› ("Concept Digital", "we") handles personal data. We wrote it to be read, not to be survived. If anything here is unclear, write to ‹privacy@… email› and a person will answer.
‹Legal entity›, ‹registered address›. For visitors in Turkey, our KVKK notice governs and is available at /kvkk. For visitors in the EU/EEA, this notice is written to the GDPR.
We collect only what a specific purpose needs. When you contact us: your name, work email, organisation, and the brief you send — to reply and to scope the work; basis: steps toward a contract at your request. When you apply for a role: the details in the form and the CV you attach — to run the hiring process; basis: steps toward a contract, and our legitimate interest in hiring. When you browse: technical logs (IP, browser, pages) for security and to keep the site working; basis: our legitimate interest in a secure, functioning site. We do not build advertising profiles. We do not ask for special-category data; please don't put any into our forms.
We do not sell personal data. We share it only as far as delivering the service requires, with processors bound by confidentiality: ‹hosting provider›, ‹email provider›, ‹analytics provider›. Where data leaves your region, it is transferred under ‹safeguard mechanism — e.g. SCCs›. We disclose to authorities only where the law requires it.
Each category only as long as its purpose needs: contact records ‹period›, applications ‹period›, technical logs ‹period›. After that we delete or anonymise it.
Access, rectification, erasure, restriction, objection, and portability, as your jurisdiction provides (GDPR Arts. 15–21; KVKK Art. 11). To exercise them, write to ‹privacy@… email›. You may also complain to your supervisory authority (EU) or the KVKK Board (Turkey).
When we update this notice we change the effective date and publish it here. Effective: ‹date›.
