GDPR Notice

This notice informs you about how Mert Çelik Denizer processes your personal data, pursuant to the GDPR (Regulation EU 2016/679) and Turkish Law No. 6698 (KVKK).

Data Controller

• Name: Mert Çelik Denizer
• Tax ID (VKN): 2920840438
• Tax office: Kocasinan VD
• Address: Fortis Plaza, B119 K.cekmece/İstanbul
• Email: [email protected]

Categories of Personal Data Processed

• Identity and contact: first name, last name, email, phone
• Customer transactions: order details, payment method and status, delivery address, order/analysis history
• Visual data: the photo you upload, the generated biometric photo, and analysis results
• Transaction security: IP address, browser info, session and log records

Purposes and Legal Bases

• Providing the service (photo analysis, generation, ordering, and delivery) — performance of a contract (Art. 6(1)(b))
• Invoicing and accounting records, consumer law obligations — legal obligation (Art. 6(1)(c))
• Security, abuse and fraud detection, error tracking — legitimate interest (Art. 6(1)(f))
• Marketing communication — consent (Art. 6(1)(a)); consent can be withdrawn at any time

Collection Methods

Your personal data is collected through registration and order forms, the photo upload interface, automatically during site usage (logs, cookies), and email correspondence.

Transfers

Your personal data is not transferred outside the EU/Turkey; all data is stored on our own servers, and no third-party service is used for photo analysis. To the extent necessary for physical delivery, name, phone, and address details are shared with our contracted cargo/courier company; data may be disclosed to competent public authorities where legally required.

Retention

• Analysis photos not linked to an order: 7 days
• Account analysis history without an order: 30 days
• Order-linked photo and print files: 90 days after the order is completed
• Order and invoice records (excluding images): at least 10 years
• Log records: up to 12 months

After these periods, data is deleted, destroyed, or anonymized. See the Privacy Policy for details.

Your Rights

• Right to know whether your personal data is processed and to request information about it
• Right of access, rectification, and erasure
• Right to restriction of processing and data portability
• Right to know the third parties to whom your data is transferred and to request that corrections/deletions be communicated to them
• Right to object, including to decisions based solely on automated processing
• Right to compensation for damages caused by unlawful processing

How to Apply

Send your requests to [email protected]. Applications are concluded free of charge within 30 days at the latest. If your application is rejected or you find the response insufficient, you retain the right to lodge a complaint with the competent supervisory authority (in Turkey: the Personal Data Protection Board).