Privacy notice

This notice explains what personal data hatefnobari.com collects, why, and what rights you have. It is provided under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and, for visitors in the European Union, the General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller is Hatef Nobari (HFNHQ), Istanbul, Türkiye.

• Privacy and data requests: [email protected]
• General contact: [email protected]

2. What data is collected

Contact form. When you send the form: your name, surname, company (if given), email address, mobile (GSM) number, page language and the date. To stop spam, a one-way hash of your IP address is kept for one hour and then deleted. The raw IP address is not stored by the form.

Direct messages. If you write by email, the information you choose to send.

Server logs. Like every website, the hosting server automatically records technical data such as IP address, browser type, the page requested and the time. These logs are used only for security and to keep the site running.

No cookies or tracking. This site sets no cookies and uses no analytics, advertising or tracking tools. Fonts and the 3D graphics library are served from this site’s own server.

YouTube videos. A video only loads from YouTube (youtube-nocookie.com) after you press play. From that moment, Google’s privacy policy applies to that video.

3. Why it is used

• To reply to your request by email or phone and prepare a proposal.
• To communicate with you about a possible or ongoing project.
• To protect the site and the form against abuse and spam.
• To meet legal obligations, for example record-keeping duties.

Your data is not sold, and it is not used for advertising.

4. Legal basis

Under KVKK Article 5(2): (c) processing is necessary to set up or perform a contract, because you asked for a proposal; (f) legitimate interest, for security and spam protection; (ç) legal obligation, where the law requires records to be kept. For EU visitors, the matching GDPR bases are Article 6(1)(b), (f) and (c).

5. Who receives data

• The hosting and email provider that runs this site and its mailboxes, only to provide that service.
• Authorities, only where the law requires it.

6. How long it is kept

Brief and contact data is kept for as long as needed to answer you, and at most two years after our last contact if no project follows. If we work together, project and invoicing records are kept for the periods required by Turkish law. Data that is no longer needed is deleted or anonymised.

7. Your rights

Under KVKK Article 11 you can ask whether your data is processed, request information about it, learn its purpose and whether it is used for that purpose, learn who it has been shared with in Türkiye or abroad, ask for incomplete or wrong data to be corrected, ask for deletion or destruction, ask that third parties who received your data be told about such corrections or deletions, object to a result that goes against you and comes only from automated analysis, and claim compensation for damage caused by unlawful processing. EU visitors also have GDPR rights, including data portability and the right to object.

To use these rights, write to [email protected]. Requests are answered free of charge within 30 days at the latest. You can also complain to the Personal Data Protection Authority (KVKK Kurumu) or, in the EU, to your local data protection authority.

8. Security

Form submissions are stored in a private location on the server that is not reachable from the web, and access is limited to the site owner. The form is protected against spam and repeated submissions.

9. Changes

This notice may be updated when the site or the law changes. The date at the top always shows the latest version.