KVKK Disclosure Notice
23 April 2026
As a graphic design agency based in the Netherlands, EnSoyDesign provides this disclosure notice in accordance with Turkish Law No. 6698 on the Protection of Personal Data (KVKK) for our clients and business partners in Turkey. This notice has been prepared to inform you about how your personal data is processed.
1. Data Controller
Your personal data is processed by EnSoyDesign in its capacity as data controller. EnSoyDesign is based in the Netherlands and provides graphic design, branding, and visual communication services for hospitality businesses.
You can contact EnSoyDesign as data controller via the email address info@ensoy.nl.
2. Purpose of Processing
Your personal data is processed for the following purposes: provision and execution of our graphic design services, management of quotation and invoicing processes, responding to your communication requests, fulfilment of legal obligations, and ensuring and improving the functionality of our website.
Your personal data is not used for purposes other than those stated and is not processed in automated decision-making processes.
3. Legal Basis
Your personal data is processed based on the following legal grounds under Article 5 of the KVKK: it is directly related to the establishment or performance of a contract, processing is mandatory for the legitimate interests of the data controller, the explicit consent of the data subject has been obtained, and it is necessary for the data controller to fulfil its legal obligation.
Your data is also protected under the European Union General Data Protection Regulation (GDPR), as EnSoyDesign is a company headquartered in the Netherlands.
4. Data Categories
The categories of personal data processed include: identity information (first name, last name), contact information (email address, phone number, address), professional information (company name, job title), and digital data (IP address, browser information, website usage data).
Special categories of personal data (health data, biometric data, etc.) are not processed by us.
5. Data Transfer
Your personal data may be shared with our business partners such as hosting providers and email service providers where necessary for service delivery. These transfers are carried out with the necessary technical and administrative measures in place.
Your personal data is only transferred to countries outside the European Economic Area where an adequate level of protection is ensured or where appropriate safeguards are in place. Your data is not shared with third parties except where legally required.
6. Retention Period
Your personal data is retained for the duration required by the processing purposes and in accordance with legal retention obligations. Client data is retained for a maximum of 7 years after the termination of the business relationship.
Data collected through contact forms is retained for a maximum of 12 months if no business relationship is established. After the retention period expires, your data is securely deleted or anonymised.
7. Rights of Data Subjects
Under Article 11 of the KVKK, you have the following rights: to learn whether your personal data has been processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with its purpose, to know the third parties to whom it is transferred domestically or abroad, to request rectification if it has been processed incompletely or inaccurately, and to request its deletion or destruction within the framework set out in Article 7 of the KVKK.
You also have the right to object to the occurrence of a result against you by analysis of processed data exclusively through automated systems, and to claim compensation for damages arising from the unlawful processing of your personal data.
8. Contact
To exercise your rights under the KVKK or for any questions regarding the processing of your personal data, you can contact us at: EnSoyDesign, email: info@ensoy.nl.
Your applications will be answered free of charge within 30 days at the latest. If the process requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.