Personal Data Protection Notice

This notice is issued under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It explains how we handle the personal data of people who contact us through www.we-design.com.tr (the “Site”). The Turkish text is the binding version; this translation is provided for convenience.

1. Data controller

Merkez Atölye Fuar Hizmetleri Ltd. Şti. (“Merkez Atölye”)
Head office: Dünya Ticaret Merkezi, A1 Blok No: 249, Yeşilköy – Bakırköy, 34149 İstanbul, Türkiye
Workshop: Balıkyolu Mah. 453 Sk. No:2 iç kapı No:1 Esenyurt / İstanbul
Telephone: 0212 465 44 87 · E-mail: info@we-design.com.tr

2. What personal data we process

When you complete the quotation and contact form:

Identity: full name
Contact: e-mail address, telephone number
Corporate information: company name
Request details: fair name, planned stand area (m²), whatever you write in the message field, and the language you used

When you visit the Site, automatically:

Transaction security data: IP address, browser and device information, date and time of visit, page viewed — in the hosting provider’s server access log
If you have consented, usage data collected through measurement cookies (see the Cookie Policy)

When you write to us directly by telephone, e-mail or WhatsApp, the contact details you share and the content of the correspondence are processed in the same way.

Please do not write special categories of personal data (health, religion, trade union membership, criminal convictions and the like) in the message field; use it only for information about your stand enquiry.

3. Purposes of processing

Receiving, assessing and quoting your exhibition stand design, production and installation enquiry
Contacting you about your enquiry — through the channel you used
If a contract is concluded, performing it, invoicing and keeping accounting records
Meeting our legal obligations, such as retaining commercial books and correspondence and responding to requests from authorised bodies
Keeping the Site secure and working correctly and preventing abuse
With your explicit consent, measuring which pages are viewed and in which language

We do not send bulk marketing e-mail or SMS. Completing the form does not give us the right to send you promotional material.

4. Legal grounds

KVKK art. 5/2-c — processing directly related to the conclusion or performance of a contract: your quotation request and the quotation process
KVKK art. 5/2-ç — compliance with a legal obligation: retention of books, records and correspondence
KVKK art. 5/2-f — legitimate interests: Site security and server access logs
KVKK art. 5/1 — explicit consent: measurement cookies and the transfer of your data abroad as described in section 6. You may withdraw your consent at any time; withdrawal does not make the processing carried out until then unlawful.

5. Method of collection

Your data is collected by partly automated means through the form on the Site, the telephone, e-mail and WhatsApp channels, the hosting provider’s server logs and — if you have consented — measurement cookies.

6. To whom and where we transfer data

What you enter in the form is not written to the Site’s database; it is only converted into an e-mail and sent to us. The parties we transfer data to are:

Hosting — SiteGround. The Site is hosted on servers in Frankfurt, Germany. Server access logs are created there.
E-mail — Google Workspace (Google LLC / Google Ireland Ltd.). Your form data is delivered to info@we-design.com.tr and stored in that mailbox.
Measurement — Google Analytics 4 (Google LLC / Google Ireland Ltd.). Only with your explicit consent; details in the Cookie Policy.
Suppliers and subcontractors. Parties we work with during production and installation, only to the extent the work requires.
Authorised public bodies. Where they are legally entitled, limited to the scope of the request.

The servers of our hosting and e-mail infrastructure are outside Türkiye, which constitutes a transfer abroad within the meaning of Article 9 of the KVKK. That transfer is made on the basis of the explicit consent you give through the checkbox on the form. We do not sell, rent or share your personal data with any third party for marketing purposes.

7. Retention periods

Quotation requests and correspondence that do not lead to a contract: 2 years from the last exchange
Work under contract: for the duration of the contractual relationship and, after it ends, 10 years under the obligation to retain commercial books and records (Turkish Commercial Code art. 82; for tax purposes, 5 years under Tax Procedure Law art. 253)
Server access logs: for the hosting provider’s own retention period
Measurement data: 14 months in our Google Analytics 4 property

When the period expires the data is deleted, destroyed or anonymised.

8. Your rights under KVKK art. 11

By applying to the data controller you have the right to:

learn whether your personal data is processed
request information if it has been processed
learn the purpose of processing and whether the data is used accordingly
know the third parties to whom it is transferred, in Türkiye or abroad
request rectification if it is incomplete or inaccurate
request erasure or destruction under the conditions of KVKK art. 7
request that rectification, erasure and destruction be notified to third parties to whom the data was transferred
object to a result against you arising from analysis solely by automated systems
claim compensation if you suffer damage due to unlawful processing

9. How to apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with information verifying your identity, you may apply:

in writing, delivered in person or through a notary to our head office address above, or
by e-mail to info@we-design.com.tr from the address registered in our records

Your application is concluded free of charge within 30 days at the latest; if the process entails a cost, the tariff set by the Personal Data Protection Board may apply. If your application is rejected, you find the response insufficient or no response is given in time, you retain the right to complain to the Board.

10. Changes

This notice took effect on 4 September 2026. Changes are published on this page with their date.