Privacy Notice

Data Controller

The personal data you share through this website are processed by Candan Işık (Istanbul), in her capacity as data controller, within the scope and for the purposes set out below.

What Data Are Processed

When you fill in the contact form, we receive your full name, your email address, your telephone number (if you provide one) and the message you write. If you reached the form from an artwork page, your message is associated with that artwork.

To prevent misuse (spam, password-guessing attacks), your IP address is used in a short-lived attempt counter. In this counter, your IP address is not stored in its original form but as an irreversible hash, and it is deleted within one day at the latest. The website’s hosting provider also keeps access logs (IP address, date/time, requested page) for security and operational purposes; these logs are deleted by the provider within a short period.

Purpose and Legal Basis of Processing

The information in the contact form is processed solely to assess your message, answer your questions and get back to you (KVKK Art. 5(2)(c): processing directly related to the establishment of a contract; Art. 5(2)(f): legitimate interest). Technical logs are processed to ensure the security of the website (Art. 5(2)(f)). Your data are not used for marketing, advertising or similar purposes, and they are not sold or rented out.

Service Providers and Transfer of Data Abroad

The website and the data are hosted on the servers of the following infrastructure providers whose services we use. As these servers are located in the United States of America, your data are transferred abroad:

• Vercel Inc. (USA): hosting of the website and the artwork images
• Neon Inc. (USA): the database in which contact messages are stored
• Resend Inc. (USA): the email notification sent to Candan Işık when a new message arrives

These providers access your data only to the extent necessary to provide their services. If you choose to write via WhatsApp or Instagram, those conversations are subject to the platform’s (Meta’s) own privacy terms.

Retention Period

Messages received through the contact form are kept for a maximum of 2 years so that the correspondence can be followed up, and they are deleted automatically once this period expires. If you would like them to be deleted sooner, you can request this via the contact address below.

Cookies

This website does not use cookies for visitor tracking, advertising or analytics. The only cookie is a strictly necessary session cookie that allows the site owner to log in to the administration panel; no cookies are placed on visitors’ devices.

Your Rights under the KVKK

Under Article 11 of the KVKK, you have the right:

• to learn whether your personal data are being processed;
• to request information about the processing, if your data have been processed;
• to learn the purpose of the processing and whether your data are used in accordance with that purpose;
• to know the third parties, domestically or abroad, to whom your data have been transferred;
• to request the rectification of your data if they have been processed incompletely or inaccurately, and to request their erasure or destruction;
• to request that these operations be notified to the third parties to whom your data have been transferred;
• to object to an outcome to your detriment arising from the analysis of your data exclusively by automated systems;
• to claim compensation for any damage you suffer as a result of the unlawful processing of your data.

Contact

To exercise these rights, or if you have any questions, you can reach us at candanisikk@gmail.com.

Back to the contact page